Detections
Analytics
800-53|CA-9
Title
INTERNAL SYSTEM CONNECTIONSDescription
The organization:Supplemental
This control applies to connections between organizational information systems and (separate) constituent system components (i.e., intra-system connections) including, for example, system connections with mobile devices, notebook/desktop computers, printers, copiers, facsimile machines, scanners, sensors, and servers. Instead of authorizing each individual internal connection, organizations can authorize internal connections for a class of components with common characteristics and/or configurations, for example, all digital printers, scanners, and copiers with a specified processing, storage, and transmission capability or all smart phones with a specific baseline configuration.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: AC-18,AC-19,AC-3,AC-4,AU-12,AU-2,CA-7,CM-2,IA-3,SC-7,SI-4
Category: SECURITY ASSESSMENT AND AUTHORIZATION
Family: SECURITY ASSESSMENT AND AUTHORIZATION
Priority: P2
Baseline Impact: LOW,MODERATE,HIGH
Audit Items
View all Reference Audit Items