← Back to catalog
AC-4(21)

Physical or Logical Separation of Information Flows

Access Control (AC)
Baselines
Low · Not includedModerate · Not includedHigh · Not included
Description

Separate information flows logically or physically using [assignment] to accomplish [assignment].

Discussion

Enforcing the separation of information flows associated with defined types of data can enhance protection by ensuring that information is not commingled while in transit and by enabling flow control by transmission paths that are not otherwise achievable. Types of separable information include inbound and outbound communications traffic, service requests and responses, and information of differing security impact or classification levels.

Implementation guidance

No content available.

CSF 2.0 crosswalk

No CSF mappings exist for this control.