ComplianceNIST 800-53 enhancement
NIST-AC-4(21) Physical or Logical Separation of Information Flows
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- AC Access Control
- Control
- AC-4(21)
Control statement
Separate information flows logically or physically using [Assignment: organization-defined mechanisms and/or techniques] to accomplish [Assignment: required separations].
Discussion
Enforcing the separation of information flows associated with defined types of data can enhance protection by ensuring that information is not commingled while in transit and by enabling flow control by transmission paths that are not otherwise achievable. Types of separable information include inbound and outbound communications traffic, service requests and responses, and information of differing security impact or classification levels.
Related
Enhancement of · Compliance (1)
- NIST-AC-4 Information Flow Enforcement NIST 800-53 control
Related control · Compliance (1)
- NIST-SC-32 System Partitioning NIST 800-53 control