+AC-04(24) Internal Normalized Format
|
AC-04(24) Internal Normalized Format
Control
When transferring information between different security domains, parse incoming data into an internal normalized format and regenerate the data to be consistent with its intended specification.
Discussion
Converting data into normalized forms is one of most of effective mechanisms to stop malicious attacks and large classes of data exfiltration.
Assessment Objective
- when transferring information between different security domains, incoming data is parsed into an internal, normalized format;
- when transferring information between different security domains, the data is regenerated to be consistent with its intended specification.
Assessment Method
Examine
Information flow enforcement policy
procedures addressing information flow enforcement
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
Organizational personnel with information flow enforcement responsibilities
system/network administrators
organizational personnel with information security responsibilities
1. Übersicht
1.1 Referenzen
1.2 Identifizierte Anforderungen
1.3 Zugehörige Regulierungen
2. Identifizierte Anforderungen
Anforderungen
| Quelle |
Anforderung |
3. Zugehörige Regulierungen
Regulierungen
| Quelle |
Regulierung |
Verknüpfte Vorgänge
|