1. Home
  2. Frameworks and Standards
  3. NIST SP 800-53
  4. NIST SP 800-53 – AC-4(5) – Information Flow Enforcement | Embedded Data Types

NIST SP 800-53 – AC-4(5) – Information Flow Enforcement | Embedded Data Types

Control(s)

Enforce [Assignment: organization-defined limitations] on embedding data types within other data types.

Additional Details (Discussion)

Embedding data types within other data types may result in reduced flow control effectiveness. Data type embedding includes inserting files as objects within other files and using compressed or archived data types that may include multiple embedded data types. Limitations on data type embedding consider the levels of embedding and prohibit levels of data type embedding that are beyond the capability of the inspection tools.

Related Control(s)

  • None.

Reference(s)

Updated on July 16, 2022
Was this article helpful?

Related Articles