---

id: "SC-07(03)" title: "Access Points" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-07.03" priority: "P1" implementation_level: "system" parent: "SC-07" enhancement: True

---

Statement

Limit the number of external network connections to the system.

Guidance

Limiting the number of external network connections facilitates monitoring of inbound and outbound communications traffic. The Trusted Internet Connection DHS TIC initiative is an example of a federal guideline that requires limits on the number of external network connections. Limiting the number of external network connections to the system is important during transition periods from older to newer technologies (e.g., transitioning from IPv4 to IPv6 network protocols). Such transitions may require implementing the older and newer technologies simultaneously during the transition period and thus increase the number of access points to the system.

Assessment Objective

the number of external network connections to the system is limited.

System and communications protection policy

procedures addressing boundary protection

system design documentation

boundary protection hardware and software

system architecture and configuration documentation

system configuration settings and associated documentation

communications and network traffic monitoring logs

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

organizational personnel with boundary protection responsibilities

Mechanisms implementing boundary protection capabilities

mechanisms limiting the number of external network connections to the system