|
control enhancementSC-7(5)

Deny by Default — Allow by Exception (SC-7(5))

Deny network communications traffic by default and allow network communications traffic by exception [organization-defined].

Security Baselines

MODERATEHIGHLOW
communicationsencryptionboundary-protectionnetworkenhancement

Why These Connect

Enhances1

These enhancements add specific capabilities or refinements to the base control.

Baselined In2

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).