---

id: "AC-04(20)" title: "Approved Solutions" family: "AC" family_name: "Access Control" sort_id: "ac-04.20" priority: "P1" implementation_level: "organization" parent: "AC-04" enhancement: True

---

Statement

Employ {{ insert: param, ac-04.20_odp.01 }} to control the flow of {{ insert: param, ac-04.20_odp.02 }} across security domains.

Guidance

Organizations define approved solutions and configurations in cross-domain policies and guidance in accordance with the types of information flows across classification boundaries. The National Security Agency (NSA) National Cross Domain Strategy and Management Office provides a listing of approved cross-domain solutions. Contact ncdsmo@nsa.gov for more information.

Assessment Objective

{{ insert: param, ac-04.20_odp.01 }} are employed to control the flow of {{ insert: param, ac-04.20_odp.02 }} across security domains.

Information flow enforcement policy

information flow control policies

procedures addressing information flow enforcement

system design documentation

system configuration settings and associated documentation

list of solutions in approved configurations

approved configuration baselines

system audit records

system security plan

other relevant documents or records

Organizational personnel with information flow enforcement responsibilities

system/network administrators

organizational personnel with information security responsibilities

Mechanisms implementing information flow enforcement functions