SC-7 Boundary protection

FedRAMP Moderate · Rev 5

What the standard requires

a. Monitor and control communications at the external managed interfaces to the system and at key internal managed interfaces within the system; b. Implement subnetworks for publicly accessible system components that are [physically | logically] separated from internal organizational networks; and c. Connect to external networks or systems only through managed interfaces consisting of boundary protection devices arranged in accordance with an organizational security and privacy architecture.

Quoted verbatim from NIST SP 800-53 Rev 5 (OSCAL catalog), which is in the public domain.

Maps to 4 controls in 3 other frameworks

Framework	Control
HITRUST CSF v11	01.f.03 Network segregation separates user groups, services and systems
	09.g.03 Network connection authorization and filtering is enforced at boundaries
NIST Cybersecurity Framework (1.1, legacy)	PR.AC-5 Network integrity protected
TISAX (VDA ISA v6)	5.7.1 Networks are segmented according to trust zones

Mappings are CMDash’s own, seeded with the product and shown on both frameworks they connect. In the product they mean evidence you attach here also counts against the controls listed above.

Track SC-7 with evidence behind it

In CMDash this control is a row with an owner, a status, uploaded evidence kept with its full history, and an export an assessor can read.

Start free trial All FedRAMP Moderate controls