---

id: "SC-07(14)" title: "Protect Against Unauthorized Physical Connections" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-07.14" priority: "P1" implementation_level: "system" parent: "SC-07" enhancement: True

---

Statement

Protect against unauthorized physical connections at {{ insert: param, sc-07.14_odp }}.

Guidance

Systems that operate at different security categories or classification levels may share common physical and environmental controls, since the systems may share space within the same facilities. In practice, it is possible that these separate systems may share common equipment rooms, wiring closets, and cable distribution paths. Protection against unauthorized physical connections can be achieved by using clearly identified and physically separated cable trays, connection frames, and patch panels for each side of managed interfaces with physical access controls that enforce limited authorized access to these items.

Assessment Objective

{{ insert: param, sc-07.14_odp }} are protected against unauthorized physical connections.

System and communications protection policy

procedures addressing boundary protection

system design documentation

system hardware and software

system architecture

system configuration settings and associated documentation

facility communications and wiring diagram system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

organizational personnel with boundary protection responsibilities

Mechanisms supporting and/or implementing protection against unauthorized physical connections