SC.4.228 Isolate administration of organizationally defined high-value critical network infrastructure components and servers.

CMMC Practice SC.4.228: Isolate administration of organizationally defined high-value critical network infrastructure components and servers.

Links to Publicly Available Resources

CMMC CLARIFICATION (Ref CMMC – Appendix B)

Where the organization has identified high value critical network infrastructure used in the processing and management of CUI data, they will physically or logically isolate management these systems from their production network, such as through the use of an Out-of-Band network. Access controls are implemented to prevent non-authorized users from accessing the management network and changing the configuration of an infrastructure component processing CUI information.