Prior to having external connection provisioned between enclaves, a Memorandum of Agreement (MOA) or Memorandum of Understanding (MOU) must be established.
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-251355
NET0131
SV-251355r806020_rule
Medium
Description
Prior to establishing a connection with another activity, a Memorandum of Understanding (MOU) or Memorandum of Agreement (MOA) must be established between the two sites prior to connecting with each other.
Review the network topology and interview the ISSO to verify that each external connection to the site's network has been validated and approved by the AO and CAO and that CAP requirements have been met.
If there are any external connections that have not been validated and approved, this is a finding.
Fix Text (F-54743r806019_fix)
All external connections will be validated and approved prior to connection. Interview the ISSM to verify that all connections have a mission requirement and that the AO is aware of the requirement.