+AC-04(10) Enable and Disable Security or Privacy Policy Filters

AC-04(10) Enable and Disable Security or Privacy Policy Filters

Control

Provide the capability for privileged administrators to enable and disable [Assignement: organization-defined security or privacy policy filters] under the following conditions: [Assignement: organization-defined conditions].

Discussion

For example, as allowed by the system authorization, administrators can enable security or privacy policy filters to accommodate approved data types. Administrators also have the capability to select the filters that are executed on a specific data flow based on the type of data that is being transferred, the source and destination security domains, and other security or privacy relevant features, as needed.

Assessment Objective

  1. capability is provided for privileged administrators to enable and disable [Assignement: security filters] under [Assignement: conditions];
  2. capability is provided for privileged administrators to enable and disable [Assignement: privacy filters] under [Assignement: conditions].

Assessment Method

Examine

Access control policy information flow information policies procedures addressing information flow enforcement system design documentation system configuration settings and associated documentation list of security policy filters enabled/disabled by privileged administrators list of privacy policy filters enabled/disabled by privileged administrators list of approved data types for enabling/disabling by privileged administrators system audit records system security plan privacy plan other relevant documents or records

Interview

Organizational personnel with responsibilities for enabling/disabling security and privacy policy filters system/network administrators organizational personnel with information security and privacy responsibilities system developers

1. Apžvalga

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai

3. Susiję teisės aktai

Teisės aktai

Susietos užduotys

Saitai
is blocked by AC-04(10) Enable and Disable Security or Privacy Policy Filters – Assessment Procedure