+03.01.15E Data Type Identifiers

03.01.15E Data Type Identifiers

Statement

Use {{ insert: param, A.03.01.15E.ODP.01 }} to validate data that is essential for information flow decisions when transferring CUI between security domains.

Guidance

Data type identifiers include filenames, file types, file signatures or tokens, and multiple internal file signatures or tokens. Systems only allow for the transfer of data that is compliant with data type format specifications. The identification and validation of data types is based on defined specifications associated with each allowed data format. The filename and number alone are not used for data type identification. Content is validated syntactically and semantically against its specification to ensure that it is the proper data type. This requirement enhances SP 800-171 requirement 03.01.03.

Statement

  • (includes preempt) Ensure that the threat event does not have an impact.

    • Reduce likelihood of occurrence and/or reduce likelihood of impact.

    • The adversary’s efforts or resources cannot be applied or are wasted.

  • (includes exert) Make it more difficult for threat events to cause adverse impacts or consequences.

    • Reduce likelihood of impact and reduce level of impact.

    • Adversary activities are restricted in scope, fail to achieve full effect, do not take place in accordance with adversary timeline, or require greater resources than adversary had planned.

Assessment objective

when transferring information between security domains, {{ insert: param, A.03.01.15E.ODP.01 }} are used to validate data that is essential for information flow decisions.

Assessment method

  • Access control policy information flow control policies procedures addressing information flow enforcement system design documentation system configuration settings and associated documentation list of data type identifiers system audit records system security plan other relevant documents or records

Assessment method

  • System/network administrators organizational personnel with information security responsibilities system developers

Assessment method

  • Mechanisms implementing information flow enforcement policy

1. Pregled

1.1 Sklici

1.2 Ugotovljene zahteve

1.3 Povezani predpisi

2. Ugotovljene zahteve

Zahteve

3. Povezani predpisi

Predpisi

Povezane zadeve

Povezave
is blocked by Data Type Identifiers