Skip to content

SC-7.5: Deny by Default — Allow by Exception

An OSCAL Control

Statement

    • Deny network communications traffic by default and allow network communications traffic by exception .

        • Guidance:

          For JAB Authorization, CSPs shall include details of this control in their Architecture Briefing