AC-04(04) Flow Control of Encrypted Information

Prevent encrypted information from bypassing ac-04.04_odp.01 by ac-04.04_odp.02.

Parameter ID Definition
ac-04.04_odp.01 information flow control mechanisms

Selection (one-or-more):

  • decrypting the information
  • blocking the flow of the encrypted information
  • terminating communications sessions attempting to pass encrypted information
  • {{ insert: param
  • ac-04.04_odp.03 }}
ac-04.04_odp.03 organization-defined procedure or method



Flow control mechanisms include content checking, security policy filters, and data type identifiers. The term encryption is extended to cover encoded data not recognized by filtering mechanisms.

Related controls 1