AC-4(9)—Information Flow Enforcement
Technical
>Control Description
INFORMATION FLOW ENFORCEMENT | HUMAN REVIEWS The information system enforces the use of human reviews for ⚙organization-defined information flows under the following conditions: ⚙organization-defined conditions.
>Supplemental Guidance
Organizations define security policy filters for all situations where automated flow control decisions are possible. When a fully automated flow control decision is not possible, then a human review may be employed in lieu of, or as a complement to, automated security policy filtering. Human reviews may also be employed as deemed necessary by organizations.
>Tailoring Guidance
This security control/enhancement specifies a very specialized and/or advanced capability that is not required for all systems. Consequently, inclusion in a departmental profile is made on a case by case basis.
Ask AI
Configure your API key to use AI features.