External Telecommunications Services (SC-7(4))

Implement a managed interface for each external telecommunication service; Establish a traffic flow policy for each managed interface; Protect the confidentiality and integrity of the information being transmitted across each interface; Document each exception to the traffic flow policy with a supporting mission or business need and duration of that need; Review exceptions to the traffic flow policy [organization-defined] and remove exceptions that are no longer supported by an explicit mission

Security Baselines