AC.L2-3.13.9[a] — System & Communications Protection (Connections Termination)Domain: System & Communications Protection (SC) | Practice: SC.L2-3.13.9 | Objective ID: 3.13.9[a] | Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 Level 2 | Assessment Objective: Network connections associated with communications sessions are terminated at the end of the sessions or after a defined period of inactivity. |
Executive Summary
CMMC objective AC.L2-3.13.9[a] requires network connections to be terminated at session end or after inactivity. This control is foundational for organizations handling Controlled Unclassified Information (CUI). Leadership must confirm documentation, ownership, and evidence of continuous operation across all CUI-bearing systems.