AC-04(08)—AC-04(08)

Enforce information flow control using ⚙organization-defined security or privacy policy filters as a basis for flow control decisions for ⚙organization-defined information flows; andb. [Selection (one or more): Block; Strip; Modify; Quarantine] data after a filter processing failure in accordance with ⚙organization-defined security or privacy policy.