NIST-AC-4(4) Flow Control of Encrypted Information

Prevent encrypted information from bypassing [Assignment: information flow control mechanisms] by [Selection (one or more of): decrypting the information; blocking the flow of the encrypted information; terminating communications sessions attempting to pass encrypted information; {{ insert: param, ac-04.04_odp.03 }} ].

Flow control mechanisms include content checking, security policy filters, and data type identifiers. The term encryption is extended to cover encoded data not recognized by filtering mechanisms.