U.S. Department of Health and Human Services
Since the connection of a system to a network or another system poses additional security risks, interconnection security agreements (ISAs) for each connection must be drafted. An ISA:
Outlines the requirements and necessary security controls to secure the interconnection; and
Defines the responsibilities of each party to the connection.
As an IT Administrator, you may participate in the drafting of such agreements for the systems under your purview. Once completed, ISAs are useful for the administration of a system.
Page 5 of 9
Implementation & Assessment Phase
Interconnection Security Agreements