id: "AC-04(32)" title: "Process Requirements for Information Transfer" family: "AC" family_name: "Access Control" sort_id: "ac-04.32" priority: "P1" implementation_level: "system" parent: "AC-04" enhancement: True
Statement
When transferring information between different security domains, the process that transfers information between filter pipelines:
Does not filter message content;
Validates filtering metadata;
Ensures the content associated with the filtering metadata has successfully completed filtering; and
Transfers the content to the destination filter pipeline.
Guidance
The processes transferring information between filter pipelines have minimum complexity and functionality to provide assurance that the processes operate correctly.
Assessment Objective: when transferring information between different security domains, the process that transfers information between filter pipelines does not filter message content;
Assessment Objective: when transferring information between different security domains, the process that transfers information between filter pipelines validates filtering metadata;
Assessment Objective: when transferring information between different security domains, the process that transfers information between filter pipelines ensures that the content with the filtering metadata has successfully completed filtering;
Assessment Objective: when transferring information between different security domains, the process that transfers information between filter pipelines transfers the content to the destination filter pipeline.
Information flow enforcement policy
procedures addressing information flow enforcement
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Organizational personnel with information flow enforcement responsibilities
system/network administrators
organizational personnel with information security responsibilities
Mechanisms implementing information flow enforcement functions
mechanisms implementing content filtering