+AC-04(04) [H] Flow Control of Encrypted Information

AC-04(04) [H] Flow Control of Encrypted Information

Control

Prevent encrypted information from bypassing [Assignement: information flow control mechanisms] by [Selection(one-or-more): decrypting the information; blocking the flow of the encrypted information; terminating communications sessions attempting to pass encrypted information; {{ insert: param, ac-04.04_odp.03 }} ].

Discussion

Flow control mechanisms include content checking, security policy filters, and data type identifiers. The term encryption is extended to cover encoded data not recognized by filtering mechanisms.

Assessment Objective

encrypted information is prevented from bypassing [Assignement: information flow control mechanisms] by [Selection(one-or-more): decrypting the information; blocking the flow of the encrypted information; terminating communications sessions attempting to pass encrypted information; {{ insert: param, ac-04.04_odp.03 }} ].

Assessment Method

Examine

Access control policy information flow control policies procedures addressing information flow enforcement system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developers

1. Pregled

1.1 Sklici

1.2 Ugotovljene zahteve

1.3 Povezani predpisi

2. Ugotovljene zahteve

Zahteve

3. Povezani predpisi

Predpisi

Povezane zadeve

Povezave
is blocked by AC-04(04) [H] Flow Control of Encrypted Information – Assessment Procedure
is blocked by Content Check for Encrypted Data