+SC-46 Cross Domain Policy Enforcement

SC-46 Cross Domain Policy Enforcement

Control

Implement a policy enforcement mechanism [Selection: physically; logically] between the physical and/or network interfaces for the connecting security domains.

Discussion

For logical policy enforcement mechanisms, organizations avoid creating a logical path between interfaces to prevent the ability to bypass the policy enforcement mechanism. For physical policy enforcement mechanisms, the robustness of physical isolation afforded by the physical implementation of policy enforcement to preclude the presence of logical covert channels penetrating the security domain may be needed. Contact [ncdsmo@nsa.gov](mailto:ncdsmo@nsa.gov) for more information.

Assessment Objective

a policy enforcement mechanism is [Selection: physically; logically] implemented between the physical and/or network interfaces for the connecting security domains.

Assessment Method

Examine

System and communications protection policy procedures addressing cross-domain policy enforcement system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities organizational personnel installing, configuring, and/or maintaining the system

1. Ülevaade

1.1 Viited

1.2 Tuvastatud nõuded

1.3 Seotud regulatsioonid

2. Tuvastatud nõuded

Nõuded

3. Seotud regulatsioonid

Regulatsioonid

Lingitud teemad

Lingid
is blocked by SC-46 Cross Domain Policy Enforcement – Assessment Procedure
is blocked by Cross Domain Solution (CDS)