ComplianceNIST 800-53 enhancement

NIST-SI-14(3) Non-persistent Connectivity

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SI System and Information Integrity
Control
SI-14(3)

Control statement

Establish connections to the system on demand and terminate connections after [Selection (one of): completion of a request; a period of non-use].

Discussion

Persistent connections to systems can provide advanced adversaries with paths to move laterally through systems and potentially position themselves closer to high value assets. Limiting the availability of such connections impedes the adversary’s ability to move freely through organizational systems.

Related

Enhancement of · Compliance (1)

Related control · Compliance (1)

  • NIST-SC-10 Network Disconnect NIST 800-53 control