CCI-002212

The organization defines the solutions in approved configurations to be employed to control the flow of organization-defined information across security domains.

Implementation Guidance

The organization being inspected/assessed defines and documents the solutions in approved configurations to be employed to control the flow of information defined in AC-4 (20), CCI 2213 across security domains. DoD has determined the solutions are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented solutions to ensure the organization being inspected/assessed defines the solutions in approved configurations to be employed to control the flow of information defined in AC-4 (20), CCI 2213 across security domains. DoD has determined the solutions are not appropriate to define at the Enterprise level.

Compelling Evidence

Automatically compliant

The controls below (if any) were marked by NIST as being related to CCI-002212.