[Autogenerated] one of the requirements.
And GSS is that not only do you document the rule,
but you document the business reason behind.
Exactly.
Now, what about business reasons?
What I saw was this was this brilliant.
It was like, Okay,
so we have any traffic from the inside allowed to go anywhere outside so people
can use the internet and that that is difficult to justify,
Right?
Uh, and the justifications are are a little bit of give and take, right?
What is your business case?
And then what are the risks associated with that business case?
And then are you Ameliorating those risks appropriately with the
right kind of rules with the right kinds of defenses.
So it maybe makes sense for a certain segment of your environment
to be able to go out to the Internet at large,
right?
Uh, so that people can browse the web and do what they need to do.
Okay, that could be sensible for a certain part of your environment.
Right?
Uh,
does that make sense for the zone where your database
servers containing Cardholder day reside?
I don't think so.
Okay.
I don't think so.