id: "AC-04(15)" title: "Detection of Unsanctioned Information" family: "AC" family_name: "Access Control" sort_id: "ac-04.15" priority: "P1" implementation_level: "system" parent: "AC-04" enhancement: True
Statement
When transferring information between different security domains, examine the information for the presence of {{ insert: param, ac-04.15_odp.01 }} and prohibit the transfer of such information in accordance with the {{ insert: param, ac-4.15_prm_2 }}.
Guidance
Unsanctioned information includes malicious code, information that is inappropriate for release from the source network, or executable code that could disrupt or harm the services or systems on the destination network.
Assessment Objective: when transferring information between different security domains, information is examined for the presence of {{ insert: param, ac-04.15_odp.01 }};
Assessment Objective: when transferring information between different security domains, transfer of {{ insert: param, ac-04.15_odp.01 }} is prohibited in accordance with the {{ insert: param, ac-04.15_odp.02 }};
Assessment Objective: when transferring information between different security domains, transfer of {{ insert: param, ac-04.15_odp.01 }} is prohibited in accordance with the {{ insert: param, ac-04.15_odp.03 }}.
Access control policy
information flow control policies
procedures addressing information flow enforcement
system design documentation
system configuration settings and associated documentation
list of unsanctioned information types and associated information
system audit records
system security plan
privacy plan
other relevant documents or records
Organizational personnel with information security responsibilities
organizational personnel with privacy responsibilities
system developers
Mechanisms implementing information flow enforcement policy