Under active development Content is continuously updated and improved

AC-4(20)Information Flow Enforcement

Technical

>Control Description

INFORMATION FLOW ENFORCEMENT | APPROVED SOLUTIONS The organization employs organization-defined solutions in approved configurations to control the flow of organization-defined information across security domains.

>Supplemental Guidance

Organizations define approved solutions and configurations in cross-domain policies and guidance in accordance with the types of information flows across classification boundaries. CSE provides a baseline listing of approved cross-domain solutions.

>Tailoring Guidance

This security control/enhancement specifies a very specialized and/or advanced capability that is not required for all systems. Consequently, inclusion in a departmental profile is made on a case by case basis.

Ask AI

Configure your API key to use AI features.