An error occurred:

CCIs

Number Definition Status Related
CCI-003662 Defines the information flow control mechanisms to prevent the bypassing of encrypted information. Draft
CCI-003663 Enforce information flow control using organization-defined privacy policy filters as a basis for flow control decisions for organization-defined information flows. Draft
CCI-003664 Enforce information flow control using block; strip; modify and/or quarantine data after a filter processing failure in accordance with organization-defined security or privacy policy. Draft
CCI-003665 Defines the security or privacy policy to be enforced using block; strip; modify and/or quarantine data after a filter processing failure. Draft
CCI-003666 Defines the security or privacy policy filters implemented when transferring information between security domains. Draft
CCI-003667 When transferring information between security domains, modify non-releasable information by implementing organization-defined modification action. Draft
CCI-003668 Defines the modification action when transferring information between different security domains. Draft
CCI-003669 When transferring information between different security domains, parse incoming data into an internal normalized format. Draft
CCI-003670 When transferring information between different security domains, regenerate the data to be consistent with its intended specification. Draft
CCI-003671 When transferring information between different security domains, sanitize data to minimize delivery of malicious content, command and control of malicious code, malicious code augmentation, and steganography encoded data; spillage of sensitive information in accordance with organization-defined policy. Draft
CCI-003672 Defines the policy when transferring information between different security domains. Draft
CCI-003673 When transferring information between different security domains, record and audit content filtering actions and results for the information being filtered. Draft
CCI-003674 When transferring information between different security domains, implement content filtering solutions that provide redundant and independent filtering mechanisms for each data type. Draft
CCI-003675 When transferring information between different security domains, implement a linear content filter pipeline that is enforced with discretionary and mandatory access controls. Draft
CCI-003676 When transferring information between different security domains, employ content filter orchestration engines to ensure that content filtering mechanisms successfully complete execution without errors. Draft
CCI-003677 When transferring information between different security domains, employ content filter orchestration engines to ensure that content filtering actions occur in the correct order and comply with organization-defined policy. Draft
CCI-003678 When transferring information between different security domains, implement content filtering mechanisms using multiple processes. Draft
CCI-003679 When transferring information between different security domains, prevent the transfer of failed content to the receiving domain. Draft
CCI-003680 When transferring information between different security domains, the process that transfers information between filter pipelines does not filter message content. Draft
CCI-003681 When transferring information between different security domains, the process that transfers information between filter pipelines validates filtering metadata. Draft
CCI-003682 When transferring information between different security domains, the process that transfers information between filter pipelines ensures the content associated with the filtering metadata has successfully completed filtering. Draft
CCI-003683 When transferring information between different security domains, the process that transfers information between filter pipelines transfers the content to the destination filter pipeline. Draft
CCI-003684 Identify and document organization-defined duties of individuals requiring separation. Draft
CCI-003685 Defines the individuals or roles who authorize access to organization-defined security functions. Draft
CCI-003686 Defines the individuals or roles who authorize access to organization-defined security-relevant information. Draft
CCI-003687 Limit the number of unsuccessful biometric logon attempts to an organization-defined number. Draft
CCI-003688 Defines the number of allowed unsuccessful biometric logon attempts. Draft
CCI-003689 Allow the use of organization-defined authentication factors that are different from the primary authentication factors after the number of organization-defined consecutive invalid logon attempts have been exceeded. Draft
CCI-003690 Defines the authentication factors after a number of organization-defined consecutive invalid logon attempts have been executed. Draft
CCI-003691 Enforce a limit of organization-defined number consecutive invalid logon attempts through use of the alternative factors by a user during a organization-defined time period. Draft