+AC-04(23) Modify Non-releasable Information
|
AC-04(23) Modify Non-releasable Information
Control
When transferring information between different security domains, modify non-releasable information by implementing [Assignement: modification action].
Discussion
Modifying non-releasable information can help prevent a data spill or attack when information is transferred across security domains. Modification actions include masking, permutation, alteration, removal, or redaction.
Assessment Objective
when transferring information between security domains, non-releasable information is modified by implementing [Assignement: modification action].
Assessment Method
Examine
Information flow enforcement policy
procedures addressing information flow enforcement
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
Organizational personnel with information flow enforcement responsibilities
system/network administrators
organizational personnel with information security responsibilities
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|