23 CAR § 355-1906. System security

(a) In the even the CSS server is utilized in conjunction with other networks, all communication, including remote access, must pass through at least one (1) approved application-level firewall and must have a facility that allows for an alternate network path. (b) If an alternate network path exists for redundancy purposes, it must also pass through at least one (1) application-level firewall.