+AC-04(32) Process Requirements for Information Transfer

AC-04(32) Process Requirements for Information Transfer

Control

When transferring information between different security domains, the process that transfers information between filter pipelines:
  1. Does not filter message content;
  2. Validates filtering metadata;
  3. Ensures the content associated with the filtering metadata has successfully completed filtering; and
  4. Transfers the content to the destination filter pipeline.

Discussion

The processes transferring information between filter pipelines have minimum complexity and functionality to provide assurance that the processes operate correctly.

Assessment Objective

  1. when transferring information between different security domains, the process that transfers information between filter pipelines does not filter message content;
  2. when transferring information between different security domains, the process that transfers information between filter pipelines validates filtering metadata;
  3. when transferring information between different security domains, the process that transfers information between filter pipelines ensures that the content with the filtering metadata has successfully completed filtering;
  4. when transferring information between different security domains, the process that transfers information between filter pipelines transfers the content to the destination filter pipeline.

Assessment Method

Examine

Information flow enforcement policy procedures addressing information flow enforcement system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

Organizational personnel with information flow enforcement responsibilities system/network administrators organizational personnel with information security responsibilities

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
is blocked by AC-04(32) Process Requirements for Information Transfer – Assessment Procedure