NIST SP 800-171 Revision 3's System and Communications Protection family focuses on safeguarding the confidentiality of Controlled Unclassified Information (CUI) by securing system access, managing communications, and protecting the infrastructure transmitting CUI. It emphasizes boundary defense, denial-of-service protection, and secure network configurations.
ITAR Related: Requires that systems and communications networks are protected from unauthorized access. SC controls, such as firewalls and intrusion detection systems, help secure systems and networks that process, store, or transmit controlled technical data
CMMC 2.0 Level 1:
(iii) Verify and control/limit connections to and use of external information systems.
(iv) Control information posted or processed on publicly accessible information systems.
(x) Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems.
(xi) Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks.
