AC-4 (15)

Access ControlRev 5system

Information Flow Enforcement

Control Statement

When transferring information between different security domains, examine the information for the presence of [Assignment: unsanctioned information] and prohibit the transfer of such information in accordance with the [Assignment: organization-defined security or privacy policy].

Supplemental Guidance

Unsanctioned information includes malicious code, information that is inappropriate for release from the source network, or executable code that could disrupt or harm the services or systems on the destination network.

Related Controls (1)

SI-3

CCI Identifiers (4)

CCI-001373When transferring information between different security domains, examine the information for the presence of organization-defined unsanctioned information.CCI-001374When transferring information between different security domains, prohibit the transfer of such information in accordance with the organization-defined security or privacy policy.CCI-002203Defines the unsanctioned information when transferring information between different security domains.CCI-002204Defines the security or privacy policy which prohibits the transfer of unsanctioned information between different security domains.

Linked STIG Checks (9)

Across 3 STIGs. Click to expand.