Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-35275 | SRG-APP-000084-MAPP-NA | SV-46562r1_rule | Medium |
Description |
---|
This non-repudiation control enhancement is intended to mitigate the risk that information could be modified between review and transfer/release particularly when transfer is occurring between security domains. In those instances where the application is transferring data intended for release across security domains, the application must validate the binding of the reviewer's identity to the information at the transfer/release point prior to release/transfer from one security domain to another security domain. Rationale for non-applicability: Mobile applications that provide flow control or inter-domain communication are outside the scope of this SRG. |
STIG | Date |
---|---|
Mobile Application Security Requirements Guide | 2013-01-04 |
Check Text ( C-43644r1_chk ) |
---|
This requirement is NA for the MAPP SRG. |
Fix Text (F-39821r1_fix) |
---|
The requirement is NA. No fix is required. |