V-288269

Discussion

Attribution is a critical component of a security concept of operations. The ability to identify source and destination points for information flowing in information systems allows the forensic reconstruction of events when required, and encourages policy compliance by attributing policy violations to specific organizations/individuals. Successful domain authentication requires that information system labels distinguish among systems, organizations, and individuals involved in preparing, sending, receiving, or disseminating information. This requirement applies to applications that transfer information between different security domains (e.g., multilevel security). This requirement pertains to Zero Trust.

Check Content

Review the application documentation and deployed configuration to determine whether the application uniquely identifies and authenticates source points by organization, system, application, and/or individual for information transfer.

If the application does not uniquely identify and authenticate source points by organization, system, application, and/or individual for information transfer, this is a finding.