💼 CA-3 SYSTEM INTERCONNECTIONS

• ID: /frameworks/nist-sp-800-53-r4/ca/03

Description

The organization: CA-3a. Authorizes connections from the information system to other information systems through the use of Interconnection Security Agreements; CA-3b. Documents, for each interconnection, the interface characteristics, security requirements, and the nature of the information communicated; and CA-3c. Reviews and updates Interconnection Security Agreements [Assignment: organization-defined frequency].

Similar

• Internal
  • ID: dec-c-d8a7eec3

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 NIST CSF v1.1 → 💼 DE.AE-1: A baseline of network operations and expected data flows for users and systems is established and managed		10	34		no data
💼 NIST CSF v1.1 → 💼 ID.AM-3: Organizational communication and data flows are mapped		4	8		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 CA-3 (1) UNCLASSIFIED NATIONAL SECURITY SYSTEM CONNECTIONS					no data
💼 CA-3 (2) CLASSIFIED NATIONAL SECURITY SYSTEM CONNECTIONS					no data
💼 CA-3 (3) UNCLASSIFIED NON-NATIONAL SECURITY SYSTEM CONNECTIONS					no data
💼 CA-3 (4) CONNECTIONS TO PUBLIC NETWORKS					no data
💼 CA-3 (5) RESTRICTIONS ON EXTERNAL SYSTEM CONNECTIONS					no data

Policies (2)

Policy	Logic Count	Flags	Compliance
🛡️ Google Cloud SQL Instance External Authorized Networks whitelists all public IP addresses🟢	1	🟢 x6	no data
🛡️ Google GCE Instance has a public IP address🟢	1	🟢 x6	no data