Navigate

AC-4 (20)

AC-4 (20): Approved Solutions

The organization employs [Assignment: organization-defined solutions in approved configurations] to control the flow of [Assignment: organization-defined information] across security domains.

Supplemental

Organizations define approved solutions and configurations in cross-domain policies and guidance in accordance with the types of information flows across classification boundaries. The Unified Cross Domain Management Office (UCDMO) provides a baseline listing of approved cross-domain solutions.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
Cross Domain (Multilevel), Cross Domain (Transfer)

Related Controls

The controls below (if any) were marked by NIST as being related to AC-4 (20).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of AC-4 (20).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-4 (20).

CCI	Definition
CCI-002212	The organization defines the solutions in approved configurations to be employed to control the flow of organization-defined information across security domains.
CCI-002213	The organization defines the information to be subjected to flow control across security domains.
CCI-002214	The organization employs organization-defined solutions in approved configurations to control the flow of organization-defined information across security domains.