CCI-002502

The organization defines the subset of identified covert channels in the operational environment of the information system that are to have the bandwidth measured.

Implementation Guidance

The organization being inspected/assessed defines and documents the subset of identified covert channels in the operational environment of the information system that are to have the bandwidth measured. DoD has determined the subset is not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented subset of identified covert channels to ensure the organization being inspected/assessed defines the subset of identified covert channels in the operational environment of the information system that are to have the bandwidth measured. DoD has determined the subset is not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated Standard Operating Procedure (SOP). 2.) Concept of Operations (CONOP). 3.) System Configuration policy (reference "bandwidth" section).

The controls below (if any) were marked by NIST as being related to CCI-002502.