SC-7 (5) Boundary Protection | Deny by Default - Allow by Exception (M) (H)