Access Points Implementation of Trusted Refer to the M-08-05: Internet Connections (TIC) Trusted Internet SC-7.3 and the X X Connections (TIC) Reference Architecture Document Version 2.0 for control details. External Telecommunications Services The DOC requires OUs to: (a) Implement a managed interface for each external telecommunication service; (b) Establish a traffic flow policy for each managed interface; (c) Protect the confidentiality and integrity of the SC-7.4 X X information being transmitted across each interface; (d) Document each exception to the traffic flow policy with a supporting mission/business need and duration of that need; and (e) Review exceptions to the traffic flow policy annually and removes exceptions that are no longer supported by an explicit mission/business need. Network Disconnect Network Disconnect The DOC requires the OUs to ensure the information system terminates a network connection at the end SC-10 X X of a session or after thirty (30) minutes of inactivity. System and Information Integrity (SI) Security Baselines Control Control Name/Requirement Number Low High Malicious Code Protection Malicious Code Protection The DOC requires OUs to: a. Employ malicious code protection mechanisms at information system entry and exit points to detect and eradicate malicious code; b. Update malicious code protection mechanisms SI-3 X X X whenever new releases are available in accordance with OU configuration management policy and procedures; c. Configure malicious code protection mechanisms to:
SC-7.3 Access Points Refer to the M-08-05: Implementation of Trusted Internet Connections (TIC) and the Trusted Internet Connections (TIC) Reference Architecture Document Version 2.0 for control details. X X SC-7.4 External Telecommunications Services The DOC requires OUs to: (a) Implement a managed interface for each external telecommunication service; (b) Establish a traffic flow policy for each managed interface; (c) Protect the confidentiality and integrity of the information being transmitted across each interface; (d) Document each exception to the traffic flow policy with a supporting mission/business need and duration of that need; and (e) Review exceptions to the traffic flow policy annually and removes exceptions that are no longer supported by an explicit mission/business need. X X Network Disconnect SC-10 Network Disconnect The DOC requires the OUs to ensure the information system terminates a network connection at the end of a session or after thirty (30) minutes of inactivity. X X System and Information Integrity (SI) Control Number Control Name/Requirement Security Baselines Low High Malicious Code Protection SI-3 Malicious Code Protection The DOC requires OUs to: a. Employ malicious code protection mechanisms at information system entry and exit points to detect and eradicate malicious code; b. Update malicious code protection mechanisms whenever new releases are available in accordance with OU configuration management policy and procedures; c. Configure malicious code protection mechanisms to: X X X
2014-doc-itspp.docx