🛡️ SC — System and Communications Protection

Monitor, control, and protect communications at system boundaries

3 Practices

Showing Level 1 Foundational only (15 requirements)

Monitor, control, and protect organizational communications at the external boundaries

This practice means your organization must actively watch, manage, and secure all incoming and outgoing network traffic where your systems connect to ...

Level 1 — Foundational View Control →

L1 SC.L1-3.13.2

Implement subnetworks for publicly accessible system components

This control requires separating publicly accessible systems (like websites or email servers) from your internal network by placing them in their own ...

Level 1 — Foundational View Control →

L1 SC.L1-3.13.3

Deny network communications traffic by default and allow network communications traffic by exception

This practice means that your network should block all traffic by default and only allow specific traffic that you explicitly permit. Think of it like...

Level 1 — Foundational View Control →