family AC
framework nist-800-53
ATT&CK techniques this control defends against
✓ covered by Sigma/YARA in our corpus
× = detection gap
Enforce approved authorizations for controlling the flow of information within the system and between connected systems based on {{ insert: param, ac-04_odp }}.
family AC
framework nist-800-53
Equivalent controls in other frameworks click any to see its ATT&CK technique mappings
Use {{ insert: param, ac-4.1_prm_1 }} associated with {{ insert: param, ac-4.1_prm_2 }} to enforce {{ insert: param, ac-04.01_odp.09 }} as a basis for flow control decisions.
family AC
framework nist-800-53
Provide the capability for privileged administrators to enable and disable {{ insert: param, ac-4.10_prm_1 }} under the following conditions: {{ insert: param, ac-4.10_prm_2 }}.
family AC
framework nist-800-53
Provide the capability for privileged administrators to configure {{ insert: param, ac-4.11_prm_1 }} to support different security or privacy policies.
family AC
framework nist-800-53
When transferring information between different security domains, use {{ insert: param, ac-04.12_odp }} to validate data essential for information flow decisions.
family AC
framework nist-800-53
When transferring information between different security domains, decompose information into {{ insert: param, ac-04.13_odp }} for submission to policy enforcement mechanisms.
family AC
framework nist-800-53
When transferring information between different security domains, implement {{ insert: param, ac-4.14_prm_1 }} requiring fully enumerated formats that restrict data structure and content.
family AC
framework nist-800-53
When transferring information between different security domains, examine the information for the presence of {{ insert: param, ac-04.15_odp.01 }} and prohibit the transfer of such information in accordance with the {{ insert: param, ac-4.15_prm_2 }}.
family AC
framework nist-800-53
family AC
framework nist-800-53
Uniquely identify and authenticate source and destination points by {{ insert: param, ac-04.17_odp }} for information transfer.
family AC
framework nist-800-53
family AC
framework nist-800-53
When transferring information between different security domains, implement {{ insert: param, ac-4.19_prm_1 }} on metadata.
family AC
framework nist-800-53
Use protected processing domains to enforce {{ insert: param, ac-04.02_odp }} as a basis for flow control decisions.
family AC
framework nist-800-53
Employ {{ insert: param, ac-04.20_odp.01 }} to control the flow of {{ insert: param, ac-04.20_odp.02 }} across security domains.
family AC
framework nist-800-53
Separate information flows logically or physically using {{ insert: param, ac-4.21_prm_1 }} to accomplish {{ insert: param, ac-04.21_odp.03 }}.
family AC
framework nist-800-53
Provide access from a single device to computing platforms, applications, or data residing in multiple different security domains, while preventing information flow between the different security domains.
family AC
framework nist-800-53
When transferring information between different security domains, modify non-releasable information by implementing {{ insert: param, ac-04.23_odp }}.
family AC
framework nist-800-53
When transferring information between different security domains, parse incoming data into an internal normalized format and regenerate the data to be consistent with its intended specification.
family AC
framework nist-800-53
When transferring information between different security domains, sanitize data to minimize {{ insert: param, ac-04.25_odp.01 }} in accordance with {{ insert: param, ac-04.25_odp.02 }}.
family AC
framework nist-800-53
When transferring information between different security domains, record and audit content filtering actions and results for the information being filtered.
family AC
framework nist-800-53
When transferring information between different security domains, implement content filtering solutions that provide redundant and independent filtering mechanisms for each data type.
family AC
framework nist-800-53
When transferring information between different security domains, implement a linear content filter pipeline that is enforced with discretionary and mandatory access controls.
family AC
framework nist-800-53
When transferring information between different security domains, employ content filter orchestration engines to ensure that: Content filtering mechanisms successfully complete execution without errors; and Content filtering actions occur in the correct order and comply with {{ insert: param, ac-04.29_odp }}.
family AC
framework nist-800-53
Enforce {{ insert: param, ac-04.03_odp }}.
family AC
framework nist-800-53
When transferring information between different security domains, implement content filtering mechanisms using multiple processes.
family AC
framework nist-800-53
When transferring information between different security domains, prevent the transfer of failed content to the receiving domain.
family AC
framework nist-800-53
When transferring information between different security domains, the process that transfers information between filter pipelines: Does not filter message content; Validates filtering metadata; Ensures the content associated with the filtering metadata has successfully completed filtering; and Transfers the content to the destination filter pipeline.
family AC
framework nist-800-53
Prevent encrypted information from bypassing {{ insert: param, ac-04.04_odp.01 }} by {{ insert: param, ac-04.04_odp.02 }}.
family AC
framework nist-800-53
Enforce {{ insert: param, ac-04.05_odp }} on embedding data types within other data types.
family AC
framework nist-800-53
Enforce information flow control based on {{ insert: param, ac-04.06_odp }}.
family AC
framework nist-800-53
Enforce one-way information flows through hardware-based flow control mechanisms.
family AC
framework nist-800-53
Enforce information flow control using {{ insert: param, ac-4.8_prm_1 }} as a basis for flow control decisions for {{ insert: param, ac-4.8_prm_2 }} ; and {{ insert: param, ac-04.08_odp.05 }} data after a filter processing failure in accordance with {{ insert: param, ac-4.8_prm_4 }}.
family AC
framework nist-800-53
Enforce the use of human reviews for {{ insert: param, ac-04.09_odp.01 }} under the following conditions: {{ insert: param, ac-04.09_odp.02 }}.
family AC
framework nist-800-53