AC-4(10)

Requirement

Provide the capability for privileged administrators to enable and disable [Assignment: organization-defined security or privacy policy filters] under the following conditions: [Assignment: organization-defined conditions].

Discussion

For example, as allowed by the system authorization, administrators can enable security or privacy policy filters to accommodate approved data types. Administrators also have the capability to select the filters that are executed on a specific data flow based on the type of data that is being transferred, the source and destination security domains, and other security or privacy relevant features, as needed.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; information flow information policies; procedures addressing information flow enforcement; system design documentation; system configuration settings and associated documentation; list of security policy filters enabled/disabled by privileged administrators; list of privacy policy filters enabled/disabled by privileged administrators; list of approved data types for enabling/disabling by privileged administrators; system audit records; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for enabling/disabling security and privacy policy filters; system/network administrators; organizational personnel with information security and privacy responsibilities; system developers].

Test

[SELECT FROM: Mechanisms implementing information flow enforcement policy; security and privacy policy filters].

ID	Assessment Objectives
AC-04(10)[01]	capability is provided for privileged administrators to enable and disable <AC-04(10)_ODP[01] security filters> under <AC-04(10)_ODP[03] conditions>;
AC-04(10)[02]	capability is provided for privileged administrators to enable and disable <AC-04(10)_ODP[02] privacy filters> under <AC-04(10)_ODP[04] conditions>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!