-
(a): Validate the binding of the information reviewer identity to the information at the transfer or release points prior to release or transfer between [security domains for which the binding of the information reviewer identity to the information is to be validated at transfer or release are defined;] ; and
-
(b): Perform [actions to be performed in the event of a validation error are defined;] in the event of a validation error.
Supplemental
Validating the binding of the information reviewer identity to the information at transfer or release points prevents the unauthorized modification of information between review and the transfer or release. The validation of bindings can be achieved by using cryptographic checksums. Organizations determine if validations are in response to user requests or generated automatically.