SC-7 · System and Communications Protection · NIST SP 800-53 Rev5
SC-7: Boundary protection monitors and controls communications at the system perimeter
How NIST SP 800-53 Rev5 control SC-7 (System and Communications Protection) maps to FedRAMP 20x Key Security Indicators, and the evidence scm.cc collects for it.
Educational resource only. scm.cc is not a FedRAMP Recognized Independent Assessor (3PAO) and is not FedRAMP-authorized; it grants no authorization, certification, or assessment outcome. FedRAMP.gov is the authoritative source. This is not legal advice.
What SC-7 requires
Boundary protection monitors and controls communications at the system perimeter.
Paraphrased from NIST SP 800-53 Rev. 5 — Security and Privacy Controls for Information Systems and Organizations (checked 2026-10-31). scm.cc does not reproduce the official control text; read the NIST catalog for the normative wording.
FedRAMP 20x KSIs that cover SC-7
These Key Security Indicators officially cite SC-7 as a related SP 800-53 control, so satisfying them is how a 20x package demonstrates this control.
KSI-CNA-EIS — Enforcing Intended State
Cloud Native Architecture · official related-control citation: sc-7.18
KSI-CNA-IBP — Implementing Best Practices
Cloud Native Architecture · official related-control citation: sc-7.18
KSI-CNA-MAT — Minimizing Attack Surface
Cloud Native Architecture · official related-control citation: sc-7.18, sc-7.3, sc-7.4, sc-7.5, sc-7.8
KSI-CNA-RNT — Restricting Network Traffic
Cloud Native Architecture · official related-control citation: sc-7.10, sc-7.18, sc-7.20, sc-7.21, sc-7.5
KSI-CNA-RVP — Reviewing Protections
Cloud Native Architecture · official related-control citation: sc-7.18
KSI-CNA-ULN — Using Logical Networking
Cloud Native Architecture · official related-control citation: sc-7, sc-7.20, sc-7.21, sc-7.7
KSI-SVC-ACM — Automating Configuration Management
Service Configuration · official related-control citation: sc-7.18
KSI-SVC-EIS — Evaluating and Improving Security
Service Configuration · official related-control citation: sc-7
KSI-SVC-PRR — Preventing Residual Risk
Service Configuration · official related-control citation: sc-7.18
KSI-SVC-SIN — Securing Information
Service Configuration · official related-control citation: sc-7.18
Evidence scm.cc collects for SC-7
scm.cc tracks this as manual evidence you attach; it validates and replays exactly what you provide (no automated claim beyond that).
Related System and Communications Protection controls
- SC-13 — Approved cryptography protects the confidentiality and integrity of data