|Finding ID||Version||Rule ID||IA Controls||Severity|
|Prior to establishing a connection with another activity, a Memorandum of Understanding (MOU) or Memorandum of Agreement (MOA) must be established between the two sites prior to connecting with each other.|
|Network Infrastructure Policy Security Technical Implementation Guide||2016-12-22|
|Check Text ( C-66995r1_chk )|
| Review the network topology and interview the ISSO to verify that each external connection to the site’s network has been validated and approved by the AO and CAO and that CAP requirements have been met. |
If there are any external connections that have not been validated and approved, this is a finding.
|Fix Text (F-72425r1_fix)|
|All external connections will be validated and approved prior to connection. Interview the ISSM to verify that all connections have a mission requirement and that the AO is aware of the requirement.|