id: "AC-04(10)" title: "Enable and Disable Security or Privacy Policy Filters" family: "AC" family_name: "Access Control" sort_id: "ac-04.10" priority: "P1" implementation_level: "system" parent: "AC-04" enhancement: True
Statement
Provide the capability for privileged administrators to enable and disable {{ insert: param, ac-4.10_prm_1 }} under the following conditions: {{ insert: param, ac-4.10_prm_2 }}.
Guidance
For example, as allowed by the system authorization, administrators can enable security or privacy policy filters to accommodate approved data types. Administrators also have the capability to select the filters that are executed on a specific data flow based on the type of data that is being transferred, the source and destination security domains, and other security or privacy relevant features, as needed.
Assessment Objective: capability is provided for privileged administrators to enable and disable {{ insert: param, ac-04.10_odp.01 }} under {{ insert: param, ac-04.10_odp.03 }};
Assessment Objective: capability is provided for privileged administrators to enable and disable {{ insert: param, ac-04.10_odp.02 }} under {{ insert: param, ac-04.10_odp.04 }}.
Access control policy
information flow information policies
procedures addressing information flow enforcement
system design documentation
system configuration settings and associated documentation
list of security policy filters enabled/disabled by privileged administrators
list of privacy policy filters enabled/disabled by privileged administrators
list of approved data types for enabling/disabling by privileged administrators
system audit records
system security plan
privacy plan
other relevant documents or records
Organizational personnel with responsibilities for enabling/disabling security and privacy policy filters
system/network administrators
organizational personnel with information security and privacy responsibilities
system developers
Mechanisms implementing information flow enforcement policy
security and privacy policy filters