Navigate

AC-4 (21)

AC-4 (21): Physical / Logical Separation Of Information Flows

The information system separates information flows logically or physically using [Assignment: organization-defined mechanisms and/or techniques] to accomplish [Assignment: organization-defined required separations by types of information].

Supplemental

Enforcing the separation of information flows by type can enhance protection by ensuring that information is not commingled while in transit and by enabling flow control by transmission paths perhaps not otherwise achievable. Types of separable information include, for example, inbound and outbound communications traffic, service requests and responses, and information of differing security categories.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
Cross Domain (Multilevel), Cross Domain (Transfer)

Related Controls

The controls below (if any) were marked by NIST as being related to AC-4 (21).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of AC-4 (21).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-4 (21).

CCI	Definition
CCI-002215	The organization defines the mechanisms and/or techniques to be used to logically or physically separate information flows.
CCI-002216	The organization defines the types of information required to accomplish logical or physical separation of information flows.
CCI-002217	The information system separates information flows logically or physically using organization-defined mechanisms and/or techniques to accomplish organization-defined required separations by types of information.