CCI-002192

The organization defines the policies the information system is to enforce to achieve dynamic information flow control.

Implementation Guidance

The organization being inspected/assessed defines and documents the policies the information system is to enforce to achieve dynamic information flow control. The policies shall address dynamic reconfiguration of data flow based upon predefined rules. DoD has determined the policies are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented policies to ensure the organization being inspected/assessed defines the policies the information system is to enforce to achieve dynamic information flow control. DoD has determined the policies are not appropriate to define at the Enterprise level

Compelling Evidence

1.) Signed and dated documentation that defines the policies that enforce the system to achieve dynamic information flow control.

The controls below (if any) were marked by NIST as being related to CCI-002192.