03.13.01 Boundary Protection

This policy outlines the requirements for establishing and maintaining secure network boundaries to protect Federal Contract Information (FCI) from unauthorized access, use, disclosure, disruption, modification, or destruction. It addresses the monitoring and control of communications at external and key internal interfaces, the implementation of subnetworks for publicly accessible components, and the secure connection to external systems through managed interfaces with appropriate boundary protection devices.

• A.03.13.01.a[01]: communications at external managed interfaces to the system are monitored.
• A.03.13.01.a[02]: communications at external managed interfaces to the system are controlled.
• A.03.13.01.a[03]: communications at key internal managed interfaces within the system are monitored.
• A.03.13.01.a[04]: communications at key internal managed interfaces within the system are controlled.
• A.03.13.01.b: subnetworks are implemented for publicly accessible system components that are physically or logically separated from internal networks.
• A.03.13.01.c: external system connections are only made through managed interfaces that consist of boundary protection devices arranged in accordance with an organizational security architecture.