Zone C systems have external connectivity to a network other than that of an additional testing facility with the same security requirements (e.g. Zone C to Zone C).

From Enclave - Zone C Checklist

Part of Zone C systems have external connectivity.

Associated with IA controls: EBCR-1

SV-14986r1_rule Zone C systems have external connectivity to a network other than that of an additional testing facility with the same security requirements (e.g. Zone C to Zone C).

Vulnerability discussion

Zone C is a closed network environment. Zone C T&D environments are specific in nature to those facilities that have a mission to communicate with another testing facility (e.g., DISA JITC). There are no direct external (DoD or Internet) connections to Zone C environments or networks. Network connectivity to another testing facility may be accomplished via tunneling mechanisms such as VPNs, private circuit (preferred method), TACLANE, MPLS, or other means of complete traffic isolation. At no time will the Zone C system data be commingled with the General Business Enclave LAN or with DoD network traffic. The very nature of the Closed Network Test environment precludes network connectivity to any other network outside of the secondary testing facility.

Check content

Work with the network reviewer to determine if a Zone C environment has network connectivity outside of the Zone C LAN. If there is established connectivity, have the reviewer along with the Network Administrator identify the destination of any network traffic. Interview the IAO to determine if a connection between another testing facility is approved and if there is an MOA/MOU in place for the connection.

Fix text

The IAO will ensure Zone C systems do not have external connectivity to any network other than to that of an additional testing facility with the same security requirements (Zone C to Zone C).

Pro Tips

Powered by sagemincer