ComplianceNIST 800-53 enhancement

NIST-AC-4(23) Modify Non-releasable Information

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AC Access Control
Control
AC-4(23)

Control statement

When transferring information between different security domains, modify non-releasable information by implementing [Assignment: modification action].

Discussion

Modifying non-releasable information can help prevent a data spill or attack when information is transferred across security domains. Modification actions include masking, permutation, alteration, removal, or redaction.

Related

Enhancement of · Compliance (1)

  • NIST-AC-4 Information Flow Enforcement NIST 800-53 control