SC-7 (4) Control Enhancement (H)

SC-7 (4) Control Enhancement (H)

1. 
   Implements a managed interface for each external telecommunication service;
   
2. 
   Establishes a traffic flow policy for each managed interface;
   
3. 
   Protects the confidentiality and integrity of the information being transmitted across each interface;
   
4. 
   Documents each exception to the traffic flow policy with a supporting mission/business need and duration of that need; and
   
5. 
   Reviews exceptions to the traffic flow policy [FedRAMP Assignment: at least every ninety (90) days or whenever there is a change in the threat environment that warrants a review of the exceptions] and removes exceptions that are no longer supported by an explicit mission/business need.