+AC-04(29) Filter Orchestration Engines

AC-04(29) Filter Orchestration Engines

Control

When transferring information between different security domains, employ content filter orchestration engines to ensure that:
  1. Content filtering mechanisms successfully complete execution without errors; and
  2. Content filtering actions occur in the correct order and comply with [Assignement: policy].

Discussion

Content filtering is the process of inspecting information as it traverses a cross-domain solution and determines if the information meets a predefined security policy. An orchestration engine coordinates the sequencing of activities (manual and automated) in a content filtering process. Errors are defined as either anomalous actions or unexpected termination of the content filter process. This is not the same as a filter failing content due to non-compliance with policy. Content filter reports are a commonly used mechanism to ensure that expected filtering actions are completed successfully.

Assessment Objective

  1. when transferring information between security domains, content filter orchestration engines are employed to ensure that content-filtering mechanisms successfully complete execution without errors;
    1. when transferring information between security domains, content filter orchestration engines are employed to ensure that content-filtering actions occur in the correct order;
    2. when transferring information between security domains, content filter orchestration engines are employed to ensure that content-filtering actions comply with [Assignement: policy].

Assessment Method

Examine

Information flow enforcement policy procedures addressing information flow enforcement system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

Organizational personnel with information flow enforcement responsibilities system/network administrators organizational personnel with information security responsibilities

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by AC-04(29) Filter Orchestration Engines – Assessment Procedure