Navigate

SC-16(3)

SC-16(3): Cryptographic Binding

Implement [mechanisms or techniques to bind security and privacy attributes to transmitted information are defined;] to bind security and privacy attributes to transmitted information.

Supplemental

Cryptographic mechanisms and techniques can provide strong security and privacy attribute binding to transmitted information to help ensure the integrity of such information.

CIA Levels
Confidentiality	unknown
Integrity	high
Availability	unknown

Overlays
DAF Baseline

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to SC-16(3).

Control	Description
AC-16	a: Provide the means to associate [one of ] with [one of ] for information in storage, in process, and/or in transmission; b: Ensure that the attribute associations are made and retained with the information; c: Establish the following permitted security and privacy attributes from the attributes defined in [AC-16a](#ac-16_smt.a) for [one of ]: [one of ]; d: Determine the following permitted attribute values or ranges for each of the established attributes: [attribute values or ranges for established attributes are defined;]; e: Audit changes to attributes; and f: Review [one of ] for applicability [one of ].
SC-12	Establish and manage cryptographic keys when cryptography is employed within the system in accordance with the following key management requirements: [requirements for key generation, distribution, storage, access, and destruction are defined;].
SC-13	a: Determine the [cryptographic uses are defined;] ; and b: Implement the following types of cryptography required for each specified cryptographic use: [types of cryptography for each specified cryptographic use are defined;].

Enhancements

The controls below (if any) add on to the requirements of SC-16(3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SC-16(3).

CCI	Definition
CCI-004906	Implement organization-defined mechanisms or techniques to bind security attributes to transmitted information.
CCI-004907	Implement organization-defined mechanisms or techniques to bind privacy attributes to transmitted information.
CCI-004908	Defines the mechanisms or techniques for binding security and privacy attributes to transmitted information.