---

id: "AC-04(11)" title: "Configuration of Security or Privacy Policy Filters" family: "AC" family_name: "Access Control" sort_id: "ac-04.11" priority: "P1" implementation_level: "system" parent: "AC-04" enhancement: True

---

Statement

Provide the capability for privileged administrators to configure {{ insert: param, ac-4.11_prm_1 }} to support different security or privacy policies.

Guidance

Documentation contains detailed information for configuring security or privacy policy filters. For example, administrators can configure security or privacy policy filters to include the list of inappropriate words that security or privacy policy mechanisms check in accordance with the definitions provided by organizations.

Assessment Objective: capability is provided for privileged administrators to configure {{ insert: param, ac-04.11_odp.01 }} to support different security or privacy policies;

Assessment Objective: capability is provided for privileged administrators to configure {{ insert: param, ac-04.11_odp.02 }} to support different security or privacy policies.

Access control policy

information flow control policies

procedures addressing information flow enforcement

system design documentation

system configuration settings and associated documentation

list of security policy filters

list of privacy policy filters

system audit records

system security plan

privacy plan

other relevant documents or records

Organizational personnel with responsibilities for configuring security and privacy policy filters

system/network administrators

organizational personnel with information security and privacy responsibilities

system developers

Mechanisms implementing information flow enforcement policy

security and privacy policy filters