id: "SI-14(03)" title: "Non-persistent Connectivity" family: "SI" family_name: "System and Information Integrity" sort_id: "si-14.03" priority: "P1" implementation_level: "organization" parent: "SI-14" enhancement: True
Statement
Establish connections to the system on demand and terminate connections after {{ insert: param, si-14.03_odp }}.
Guidance
Persistent connections to systems can provide advanced adversaries with paths to move laterally through systems and potentially position themselves closer to high value assets. Limiting the availability of such connections impedes the adversary’s ability to move freely through organizational systems.
Assessment Objective: connections to the system are established on demand;
Assessment Objective: connections to the system are terminated after {{ insert: param, si-14.03_odp }}.
System and information integrity policy
system and information integrity procedures
procedures addressing non-persistence for system components
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Organizational personnel responsible for limiting persistent connections
organizational personnel with information security responsibilities
Organizational processes for limiting persistent connections
automated mechanisms supporting and/or implementing non-persistent connectivity