CCI-000031
CCI-000031 Definition
Enforce one-way information flows using hardware-based flow control mechanisms.
| Status | |
| Type | CheckType.technical |
Master Assessment Datasheet
Implementation Guidance
Determine if one-way information flows are enforced through hardware-based flow control mechanisms.
Validation Procedures
Examine: [SELECT FROM: Access control policy; information flow control policies; procedures addressing information flow enforcement; system design documentation; system configuration settings and associated documentation; system hardware mechanisms and associated configurations; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developers]. Test: [SELECT FROM: Hardware mechanisms implementing information flow enforcement policy].