AC-4 Information flow enforcement
What the standard requires
Enforce approved authorizations for controlling the flow of information within the system and between connected systems based on [information flow control policies].
Quoted verbatim from NIST SP 800-53 Rev 5 (OSCAL catalog), which is in the public domain.
Maps to 1 control in 1 other framework
| Framework | Control |
|---|---|
| NIST Cybersecurity Framework (1.1, legacy) | PR.DS-5 Protections against data leaks implemented |
Mappings are CMDash’s own, seeded with the product and shown on both frameworks they connect. In the product they mean evidence you attach here also counts against the controls listed above.
Track AC-4 with evidence behind it
In CMDash this control is a row with an owner, a status, uploaded evidence kept with its full history, and an export an assessor can read.