GRCA Planeth
Jūs neprisijungę
Prisijungti
Pradžia
Šaltiniai
›
AC-04 Information Flow Enforcement
›
Standard - AC-04(31) Failed Content Transfer Prevention
+AC-04(31) Failed Content Transfer Prevention
AC-04(31) Failed Content Transfer Prevention
Control
When transferring information between different security domains, prevent the transfer of failed content to the receiving domain.
Discussion
Content that failed filtering checks can corrupt the system if transferred to the receiving domain.
Assessment Objective
when transferring information between different security domains, the transfer of failed content to the receiving domain is prevented.
Assessment Method
Examine
Information flow enforcement policy procedures addressing information flow enforcement system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records
Interview
Organizational personnel with information flow enforcement responsibilities system/network administrators organizational personnel with information security responsibilities
1. Apžvalga
Pavadinimas
Standartas
1.1 Nuorodos
1.2 Nustatyti reikalavimai
1.3 Susiję teisės aktai
2. Nustatyti reikalavimai
Reikalavimai
Šaltinis
Reikalavimas
3. Susiję teisės aktai
Teisės aktai
Šaltinis
Reguliavimas
Susietos užduotys
Saitai
Saito tipas
Užduotis
is blocked by
AC-04(31) Failed Content Transfer Prevention – Assessment Procedure
is blocked by
Cross Domain Content Transfer
NIST
-
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final