ComplianceNIST 800-53 enhancement
NIST-SI-14(3) Non-persistent Connectivity
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SI System and Information Integrity
- Control
- SI-14(3)
Control statement
Establish connections to the system on demand and terminate connections after [Selection (one of): completion of a request; a period of non-use].
Discussion
Persistent connections to systems can provide advanced adversaries with paths to move laterally through systems and potentially position themselves closer to high value assets. Limiting the availability of such connections impedes the adversary’s ability to move freely through organizational systems.
Related
Enhancement of · Compliance (1)
- NIST-SI-14 Non-persistence NIST 800-53 control
Related control · Compliance (1)
- NIST-SC-10 Network Disconnect NIST 800-53 control