What Boundary Protection (NIST 800-53) requires
NIST SP 800-53 Rev 5 Control SC-7 (Boundary Protection) requires organizations to monitor and control communications at the external boundary of the system and at key internal boundaries, implement subnetworks for publicly accessible system components, and connect to external networks or systems only through managed interfaces consisting of boundary protection devices arranged in accordance with an organizational security and privacy architecture. SC-7 is a HIGH baseline control mandatory for all federal systems at MODERATE and HIGH impact levels, FedRAMP High/Moderate, and CMMC 2.0 Level 2, and it is the foundational network security control upon which egress filtering, intrusion detection, and data loss prevention depend. For AI agent deployments, SC-7 is critical because AI agents executing tool calls and API invocations create dynamic outbound network flows that can exfiltrate data, communicate with attacker-controlled infrastructure, or access unauthorized external services - SC-7 egress controls must explicitly govern which external endpoints AI agents are permitted to connect to, and any agent connection attempt to an unapproved endpoint must be blocked and alerted.
Pillar: Cybersecurity · Authority: NIST (National Institute of Standards and Technology) · Version: 1.1.1 · Last updated:
Primary source: https://doi.org/10.6028/NIST.SP.800-53r5
SHA-256 integrity: c18f8f6195de185d303683bbe9b8c49faa99a54d4c225961ad5d48987a294f5b
Primary Citations — 6 traced to source
- NIST SP 800-53 Rev. 5, SC-7: Boundary Protection
- NIST SP 800-53 Rev. 5, SC-7(5): Boundary Protection | Deny by Default - Allow by Exception
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/nist-800-53-sc7.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/nist-800-53-sc7.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/nist-800-53-sc7
- Back to registry: Browse all 10,108 compliance nodes