+AC-04(31) Failed Content Transfer Prevention

AC-04(31) Failed Content Transfer Prevention

Control

When transferring information between different security domains, prevent the transfer of failed content to the receiving domain.

Discussion

Content that failed filtering checks can corrupt the system if transferred to the receiving domain.

Assessment Objective

when transferring information between different security domains, the transfer of failed content to the receiving domain is prevented.

Assessment Method

Examine

Information flow enforcement policy procedures addressing information flow enforcement system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

Organizational personnel with information flow enforcement responsibilities system/network administrators organizational personnel with information security responsibilities

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by AC-04(31) Failed Content Transfer Prevention – Assessment Procedure
is blocked by Cross Domain Content Transfer