Traffic between systems and their subsystems is controlled by filtering on IP address, protocol, TCP or UDP port and similar attributes to prevent attacks and limit the spread of incidents. Filtering rests on predefined, approved rules that are checked regularly for unauthorised changes and updated as threats emerge. Ports that are not needed are blocked through the configuration of software, hardware and traffic protection and control devices.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.