id: "AC-04(30)" title: "Filter Mechanisms Using Multiple Processes" family: "AC" family_name: "Access Control" sort_id: "ac-04.30" priority: "P1" implementation_level: "system" parent: "AC-04" enhancement: True
Statement
When transferring information between different security domains, implement content filtering mechanisms using multiple processes.
Guidance
The use of multiple processes to implement content filtering mechanisms reduces the likelihood of a single point of failure.
Assessment Objective
when transferring information between security domains, content-filtering mechanisms using multiple processes are implemented.
Information flow enforcement policy
procedures addressing information flow enforcement
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Organizational personnel with information flow enforcement responsibilities
system/network administrators
organizational personnel with information security responsibilities
Mechanisms implementing information flow enforcement functions
mechanisms implementing content filtering