# SC-10 Network Disconnect

NIST SP 800-53 control. Family: SC System and Communications Protection. Function: preventative. Baselines: moderate, high. Mapping licence: CC BY-SA 4.0.

Statement: Terminate the network connection associated with a communications session at the end of the session or after [Assignment: organization-defined time period] of inactivity.
Guidance: Network disconnect applies to internal and external networks. Terminating network connections associated with specific communications sessions includes de-allocating TCP/IP address or port pairs at the operating system level and de-allocating the networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. Periods of inactivity may be established by organizations and include time periods by type of network access or for specific network accesses.

## Patterns that use it (2)
- Standard (2): SP-002 Server Module; SP-016 DMZ Module

## Clauses by framework (24 frameworks)
- iso_27001_2022: A.8.20
- anssi: Hygiene.12, SecNumCloud.10.6
- osfi_b13: B-13.3.2
- finma_circular: IV.B.d(59), IV.C(61)
- gdpr: Art.32(1)(b)
- dora: Art.9(4)(c)
- rbi_csf: Annex1.8
- hkma_tme1: TME1.8.4
- cbb_tm: TM-8
- nca_ecc: 2-5
- qatar_nia: CS
- sama_csf: 3.8
- uae_ia: T8
- bcbs_239: Principle 5
- bot_cyber: Ch2.4
- eba_ict: 3.4.2
- ffiec_is: II.C.6, II.C.9, II.C.15(c)
- hipaa_sr: §164.312(a)(2)(iii)
- cmmc_2: SC
- ieee_1686: 5.8
- common_criteria: CC Part 2 — FRU/FTA/FTP
- fda_21_cfr_11: §11.200(a)(1)(i)
- hitrust_csf: 01.b
- iso_27799: 9.5
OSA's mapping for iso_27001_2022 takes NIST's published crosswalk as its base. A clause not marked as OSA's own is in that crosswalk.

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/SC-10
- Clauses only: /api/v1/controls/SC-10?fields=mappings
- Page for people: /controls/sc-10/