NIST 800-53 REV 5 • SYSTEM AND COMMUNICATIONS PROTECTION

SC-9Transmission Confidentiality

CMMC Practice Mapping

No direct CMMC mapping

NIST 800-171 Mapping

No direct NIST 800-171 mapping

Related Controls

No related controls listed

Practitioner Notes

This control (withdrawn in Rev 5) has been incorporated into SC-8. See SC-8 for transmission confidentiality requirements.

Example 1: Refer to SC-8 — require TLS 1.2 or higher for all web-based communications to protect data confidentiality in transit.

Example 2: Refer to SC-8 — use IPsec VPN tunnels for site-to-site connections to ensure all inter-office traffic is encrypted and confidential.