+AC-04(05) Embedded Data Types

AC-04(05) Embedded Data Types

Control

Enforce [Assignement: limitations] on embedding data types within other data types.

Discussion

Embedding data types within other data types may result in reduced flow control effectiveness. Data type embedding includes inserting files as objects within other files and using compressed or archived data types that may include multiple embedded data types. Limitations on data type embedding consider the levels of embedding and prohibit levels of data type embedding that are beyond the capability of the inspection tools.

Assessment Objective

[Assignement: limitations] are enforced on embedding data types within other data types.

Assessment Method

Examine

Access control policy procedures addressing information flow enforcement system design documentation system configuration settings and associated documentation list of limitations to be enforced on embedding data types within other data types system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developers

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by AC-04(05) Embedded Data Types – Assessment Procedure
is blocked by Embedded Data Types