+SC-31(02) Maximum Bandwidth

SC-31(02) Maximum Bandwidth

Control

Reduce the maximum bandwidth for identified covert [Selection(one-or-more): storage; timing] channels to [Assignement: values].

Discussion

The complete elimination of covert channels, especially covert timing channels, is usually not possible without significant performance impacts.

Assessment Objective

the maximum bandwidth for identified covert [Selection(one-or-more): storage; timing] channels is reduced to [Assignement: values].

Assessment Method

Examine

System and communications protection policy procedures addressing covert channel analysis acquisition contracts for systems or services acquisition documentation system design documentation system configuration settings and associated documentation covert channel analysis documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities organizational personnel with covert channel analysis responsibilities system developers/integrators

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by SC-31(02) Maximum Bandwidth – Assessment Procedure