+AC-04(02) Processing Domains
|
AC-04(02) Processing Domains
Control
Use protected processing domains to enforce [Assignement: information flow control policies] as a basis for flow control decisions.
Discussion
Protected processing domains within systems are processing spaces that have controlled interactions with other processing spaces, enabling control of information flows between these spaces and to/from information objects. A protected processing domain can be provided, for example, by implementing domain and type enforcement. In domain and type enforcement, system processes are assigned to domains, information is identified by types, and information flows are controlled based on allowed information accesses (i.e., determined by domain and type), allowed signaling among domains, and allowed process transitions to other domains.
Assessment Objective
protected processing domains are used to enforce [Assignement: information flow control policies] as a basis for flow control decisions.
Assessment Method
Examine
Access control policy
information flow control policies
procedures addressing information flow enforcement
system design documentation
system security architecture and associated documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|