AC-4(29)

Requirement
When transferring information between different security domains, employ content filter orchestration engines to ensure that:
1. Content filtering mechanisms successfully complete execution without errors; and
2. Content filtering actions occur in the correct order and comply with [Assignment: organization-defined policy].

Discussion

Content filtering is the process of inspecting information as it traverses a cross-domain solution and determines if the information meets a predefined security policy. An orchestration engine coordinates the sequencing of activities (manual and automated) in a content filtering process. Errors are defined as either anomalous actions or unexpected termination of the content filter process. This is not the same as a filter failing content due to non-compliance with policy. Content filter reports are a commonly used mechanism to ensure that expected filtering actions are completed successfully.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Information flow enforcement policy; procedures addressing information flow enforcement; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with information flow enforcement responsibilities; system/network administrators; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Mechanisms implementing information flow enforcement functions; mechanisms implementing content filter orchestration engines].

ID	Assessment Objectives
AC-04(29)(b)[01]	when transferring information between security domains, content filter orchestration engines are employed to ensure that content-filtering actions occur in the correct order;
AC-04(29)(b)[02]	when transferring information between security domains, content filter orchestration engines are employed to ensure that content-filtering actions comply with <AC-04(29)_ODP policy>.
AC-04(29)(a)	when transferring information between security domains, content filter orchestration engines are employed to ensure that content-filtering mechanisms successfully complete execution without errors;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!