Mechanisms exist to prohibit the direct connection of a sensitive system to an external network without the use of an organization-defined boundary protection device.
Does the organization prohibit the direct connection of a sensitive system to an external network without the use of an organization-defined boundary protection device?