ComplianceNIST 800-53 control

NIST-SC-10 Network Disconnect

Official page ↗

Framework: NIST SP 800-53 rev5 (5.2.0)
Family: SC System and Communications Protection
Control: SC-10
ATT&CK techniques mitigated: 5

Control statement

Terminate the network connection associated with a communications session at the end of the session or after [Assignment: time period] of inactivity.

Discussion

Network disconnect applies to internal and external networks. Terminating network connections associated with specific communications sessions includes de-allocating TCP/IP address or port pairs at the operating system level and de-allocating the networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. Periods of inactivity may be established by organizations and include time periods by type of network access or for specific network accesses.

ATT&CK mappings (CTID)

• T1071 Application Layer Protocol • T1071.001 Web Protocols • T1071.002 File Transfer Protocols • T1071.003 Mail Protocols • T1071.004 DNS

Mitigates · MITRE ATT&CK (5)

T1071.001 Web Protocols sub-technique
T1071.002 File Transfer Protocols sub-technique
T1071.003 Mail Protocols sub-technique
T1071.004 DNS sub-technique
T1071 Application Layer Protocol technique

Related control · Compliance (2)

NIST-AC-17 Remote Access NIST 800-53 control
NIST-SC-23 Session Authenticity NIST 800-53 control

Referenced by Compliance · has member (1)

NIST-SC System and Communications Protection NIST 800-53 family

Referenced by Compliance · related control (6)

NIST-AC-12 Session Termination NIST 800-53 control
NIST-AC-17 Remote Access NIST 800-53 control
NIST-MA-4 Nonlocal Maintenance NIST 800-53 control
NIST-SA-24 Design For Cyber Resiliency NIST 800-53 control
NIST-SC-23 Session Authenticity NIST 800-53 control
NIST-SI-14(3) Non-persistent Connectivity NIST 800-53 enhancement