CMMC 2.0 • LEVEL 2 • SYSTEM & COMMUNICATIONS PROTECTION
SC.L2-3.13.9 — Network Disconnect
This requirement applies to internal and external networks. Terminating network connections associated with communications sessions includes deallocating TCP/IP addresses or port pairs at the operating system level or deallocating networking assignments at the application level if multiple application sessions are using a single network connection. Time periods of inactivity may be established by organizations and include time periods by type of network access or for specific network accesses.
Assessment Objectives
- the network connection associated with a communications session is terminated at the end of the session or after NSA/CNSSI 7003-compliant Protected Distribution Systems (PDS) or dedicated physically secured conduit with access controls equivalent to the data classificationCMMC/STIG of inactivity.
Practitioner Notes
Practitioner commentary coming soon.