id: "SA-08(19)" title: "Continuous Protection" family: "SA" family_name: "System and Services Acquisition" sort_id: "sa-08.19" priority: "P1" implementation_level: "system" parent: "SA-08" enhancement: True
Statement
Implement the security design principle of continuous protection in {{ insert: param, sa-08.19_odp }}.
Guidance
The principle of continuous protection states that components and data used to enforce the security policy have uninterrupted protection that is consistent with the security policy and the security architecture assumptions. No assurances that the system can provide the confidentiality, integrity, availability, and privacy protections for its design capability can be made if there are gaps in the protection. Any assurances about the ability to secure a delivered capability require that data and information are continuously protected. That is, there are no periods during which data and information are left unprotected while under control of the system (i.e., during the creation, storage, processing, or communication of the data and information, as well as during system initialization, execution, failure, interruption, and shutdown). Continuous protection requires adherence to the precepts of the reference monitor concept (i.e., every request is validated by the reference monitor; the reference monitor is able to protect itself from tampering; and sufficient assurance of the correctness and completeness of the mechanism can be ascertained from analysis and testing) and the principle of secure failure and recovery (i.e., preservation of a secure state during error, fault, failure, and successful attack; preservation of a secure state during recovery to normal, degraded, or alternative operational modes).
Continuous protection also applies to systems designed to operate in varying configurations, including those that deliver full operational capability and degraded-mode configurations that deliver partial operational capability. The continuous protection principle requires that changes to the system security policies be traceable to the operational need that drives the configuration and be verifiable (i.e., it is possible to verify that the proposed changes will not put the system into an insecure state). Insufficient traceability and verification may lead to inconsistent states or protection discontinuities due to the complex or undecidable nature of the problem. The use of pre-verified configuration definitions that reflect the new security policy enables analysis to determine that a transition from old to new policies is essentially atomic and that any residual effects from the old policy are guaranteed to not conflict with the new policy. The ability to demonstrate continuous protection is rooted in the clear articulation of life cycle protection needs as stakeholder security requirements.
Assessment Objective
{{ insert: param, sa-08.19_odp }} implement the security design principle of continuous protection.
System and services acquisition policy
access control policy
system and communications protection policy
procedures addressing boundary protection
procedures addressing the security design principle of continuous protection used in the specification, design, development, implementation, and modification of the system
system configuration settings and associated documentation
system design documentation
security and privacy requirements and specifications for the system
system security and privacy architecture
system security plan
other relevant documents or records
Organizational personnel with the responsibility for determining system security and privacy requirements
organizational personnel with system specification, design, development, implementation, and modification responsibilities
organizational personnel with access enforcement responsibilities
system/network administrators
system developers
organizational personnel with information security responsibilities
organizational personnel with boundary protection responsibilities
Organizational processes for applying the security design principle of continuous protection in system specification, design, development, implementation, and modification
mechanisms implementing access enforcement functions
mechanisms supporting the application of the security design principle of continuous protection in system specification, design, development, implementation, and modification
mechanisms supporting and/or implementing secure failure