+AC-04(10) Enable and Disable Security or Privacy Policy Filters
|
AC-04(10) Enable and Disable Security or Privacy Policy Filters
Control
Provide the capability for privileged administrators to enable and disable [Assignement: organization-defined security or privacy policy filters] under the following conditions: [Assignement: organization-defined conditions].
Discussion
For example, as allowed by the system authorization, administrators can enable security or privacy policy filters to accommodate approved data types. Administrators also have the capability to select the filters that are executed on a specific data flow based on the type of data that is being transferred, the source and destination security domains, and other security or privacy relevant features, as needed.
Assessment Objective
- capability is provided for privileged administrators to enable and disable [Assignement: security filters] under [Assignement: conditions];
- capability is provided for privileged administrators to enable and disable [Assignement: privacy filters] under [Assignement: conditions].
Assessment Method
Examine
Access control policy
information flow information policies
procedures addressing information flow enforcement
system design documentation
system configuration settings and associated documentation
list of security policy filters enabled/disabled by privileged administrators
list of privacy policy filters enabled/disabled by privileged administrators
list of approved data types for enabling/disabling by privileged administrators
system audit records
system security plan
privacy plan
other relevant documents or records
Interview
Organizational personnel with responsibilities for enabling/disabling security and privacy policy filters
system/network administrators
organizational personnel with information security and privacy responsibilities
system developers
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|