Navigate

AC-4(32)

AC-4(32): Process Requirements for Information Transfer

When transferring information between different security domains, the process that transfers information between filter pipelines:

(a): Does not filter message content;

(b): Validates filtering metadata;

(c): Ensures the content associated with the filtering metadata has successfully completed filtering; and

(d): Transfers the content to the destination filter pipeline.

Supplemental

The processes transferring information between filter pipelines have minimum complexity and functionality to provide assurance that the processes operate correctly.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
CDS - Multilevel, CDS - Transfer

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to AC-4(32).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of AC-4(32).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-4(32).

CCI	Definition
CCI-003680	When transferring information between different security domains, the process that transfers information between filter pipelines does not filter message content.
CCI-003681	When transferring information between different security domains, the process that transfers information between filter pipelines validates filtering metadata.
CCI-003682	When transferring information between different security domains, the process that transfers information between filter pipelines ensures the content associated with the filtering metadata has successfully completed filtering.
CCI-003683	When transferring information between different security domains, the process that transfers information between filter pipelines transfers the content to the destination filter pipeline.