NIST 800-53 Rev 5
424 controls available
AC-4(4)high
Flow Control of Encrypted Information
Access Control
Control Statement
Prevent encrypted information from bypassing {{ insert: param, ac-04.04_odp.01 }} by {{ insert: param, ac-04.04_odp.02 }}.
Discussion
Flow control mechanisms include content checking, security policy filters, and data type identifiers. The term encryption is extended to cover encoded data not recognized by filtering mechanisms.
- Framework
- NIST SP 800-53 Rev 5
- Family
- Access Control
- Baselines
- high
Related Frameworks
3 paths across 1 framework
Related Frameworks
CCI3 mappings
CCI-000028
1.00
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-002193
1.00
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-003662
1.00
- DISA · 2025-01-23 · disa_cci_list · equivalent
Related STIGs
127 STIGs reach this control through 80 CCIs. Expand a row to see the responsible NICE and O*NET roles.
Operating System — Server
2 STIGs
Operating System — Server
2 STIGsMicrosoft Windows Server Domain Name System (DNS) Security Technical Implementation Guide
22025-02-252 of 83 findings match
M2
Microsoft Windows Server Domain Name System (DNS) Security Technical Implementation Guide
V2R42026-02-232 of 81 findings match
M2
Operating System — Mainframe
3 STIGs
Operating System — Mainframe
3 STIGsIBM zVM Using CA VM:Secure Security Technical Implementation Guide
V2R22022-08-311 of 77 findings match
M1
Mainframe Product Security Requirements Guide
V3R42025-09-101 of 194 findings match
M1
Mainframe Product Security Requirements Guide
32024-12-051 of 193 findings match
M1
Network Device
86 STIGs
Network Device
86 STIGsEnterprise Voice, Video, and Messaging Policy Security Requirements Guide
V1R42025-12-2333 of 51 findings match
H4M27L2
Enterprise Voice, Video, and Messaging Policy Security Requirements Guide
12025-05-2933 of 51 findings match
H4M27L2
Router Security Requirements Guide
V5R22025-09-1029 of 123 findings match
H2M16L11
Cisco IOS Router RTR Security Technical Implementation Guide
V3R42025-08-1924 of 92 findings match
H2M11L11
Cisco IOS Router RTR Security Technical Implementation Guide
32024-11-2524 of 92 findings match
H2M11L11
Cisco IOS XE Router RTR Security Technical Implementation Guide
V3R52025-08-1424 of 97 findings match
H2M11L11
Cisco IOS XE Router RTR Security Technical Implementation Guide
32025-05-1624 of 97 findings match
H2M11L11
Juniper Router RTR Security Technical Implementation Guide
V3R22024-12-0524 of 96 findings match
H2M11L11
Show 78 more STIGs in this category →Hide additional STIGs
Juniper EX Series Switches Router Security Technical Implementation Guide
V2R12024-06-1023 of 102 findings match
H2M10L11
Router Security Requirements Guide
52024-05-2823 of 108 findings match
H2M10L11
Arista MLS EOS 4.X Router Security Technical Implementation Guide
V2R22025-02-2022 of 75 findings match
H2M11L9
Cisco IOS XR Router RTR Security Technical Implementation Guide
V3R32025-08-1922 of 96 findings match
H2M10L10
Cisco IOS XR Router RTR Security Technical Implementation Guide
32024-08-2222 of 96 findings match
H2M10L10
RUCKUS ICX Router Security Technical Implementation Guide
V1R12025-06-0322 of 81 findings match
H2M10L10
Cisco IOS XE Switch RTR Security Technical Implementation Guide
V3R42026-03-0418 of 88 findings match
M8L10
Cisco IOS XE Switch RTR Security Technical Implementation Guide
32025-05-2018 of 88 findings match
M8L10
Cisco NX OS Switch RTR Security Technical Implementation Guide
V3R42026-03-0417 of 78 findings match
M8L9
Cisco NX OS Switch RTR Security Technical Implementation Guide
32024-12-2017 of 78 findings match
M8L9
Dell OS10 Switch Router Security Technical Implementation Guide
V1R22026-03-0415 of 42 findings match
H1M9L5
Dell OS10 Switch Router Security Technical Implementation Guide
12024-12-1115 of 42 findings match
H1M9L5
Cisco ACI Router Security Technical Implementation Guide
12025-06-1814 of 45 findings match
M7L7
Application Layer Gateway Security Requirements Guide
22024-12-0412 of 155 findings match
M12
Application Layer Gateway Security Requirements Guide
V2R32025-09-1512 of 160 findings match
M12
HP FlexFabric Switch RTR Security Technical Implementation Guide
V1R22020-06-0311 of 21 findings match
H1M10
Network Infrastructure Policy Security Technical Implementation Guide
V10R72024-08-029 of 67 findings match
H1M1L7
Cisco ACI Router Security Technical Implementation Guide
V1R22025-12-117 of 26 findings match
M4L3
Cisco IOS Switch RTR Security Technical Implementation Guide
32024-06-067 of 53 findings match
M4L3
Cisco IOS Switch RTR Security Technical Implementation Guide
V3R32026-03-047 of 53 findings match
M4L3
Virtual Private Network (VPN) Security Requirements Guide
V3R42025-09-107 of 92 findings match
M7
Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide
V1R32025-10-016 of 47 findings match
M6
Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide
12024-08-026 of 47 findings match
M6
Akamai KSD Service Impact Level 2 ALG Security Technical Implementation Guide
V1R12017-09-155 of 33 findings match
H2M3
Layer 2 Switch Security Requirements Guide
V3R42026-02-124 of 36 findings match
M4
Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide
V1R22025-12-303 of 60 findings match
M3
Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide
12024-03-113 of 61 findings match
M3
Firewall Security Requirements Guide
V3R32025-09-223 of 35 findings match
H1M2
Symantec ProxySG ALG Security Technical Implementation Guide
V1R32020-03-273 of 66 findings match
H1M2
Cisco ASA Firewall Security Technical Implementation Guide
V2R12024-06-062 of 21 findings match
H1M1
Firewall Security Requirements Guide
32024-12-042 of 34 findings match
H1M1
IBM DataPower ALG Security Technical Implementation Guide
V1R12016-01-212 of 65 findings match
M2
IBM DataPower Network Device Management Security Technical Implementation Guide
V1R22017-10-052 of 64 findings match
M2
Juniper SRX Services Gateway IDPS Security Technical Implementation Guide
V2R12024-06-102 of 28 findings match
M2
Trend Micro TippingPoint IDPS Security Technical Implementation Guide
V2R22024-09-162 of 30 findings match
H1M1
Virtual Private Network (VPN) Security Requirements Guide
32024-12-192 of 82 findings match
M2
Arista MLS EOS 4.X NDM Security Technical Implementation Guide
V2R22025-02-201 of 21 findings match
M1
Cisco ASA NDM Security Technical Implementation Guide
V2R42025-12-081 of 47 findings match
M1
Cisco ASA NDM Security Technical Implementation Guide
22025-05-191 of 47 findings match
M1
Cisco ASA VPN Security Technical Implementation Guide
V2R22024-08-221 of 41 findings match
M1
Cisco IOS Router NDM Security Technical Implementation Guide
V3R72026-02-251 of 43 findings match
M1
Cisco IOS Router NDM Security Technical Implementation Guide
32025-05-191 of 43 findings match
M1
Cisco IOS Switch NDM Security Technical Implementation Guide
V3R72026-02-251 of 43 findings match
M1
Cisco IOS Switch NDM Security Technical Implementation Guide
32025-05-191 of 43 findings match
M1
Cisco IOS XE Router NDM Security Technical Implementation Guide
V3R72026-02-111 of 42 findings match
M1
Cisco IOS XE Router NDM Security Technical Implementation Guide
32025-05-161 of 42 findings match
M1
Cisco IOS XE Switch NDM Security Technical Implementation Guide
V3R62026-03-041 of 42 findings match
M1
Cisco IOS XE Switch NDM Security Technical Implementation Guide
32025-05-191 of 42 findings match
M1
Cisco IOS XR Router NDM Security Technical Implementation Guide
32025-05-191 of 27 findings match
M1
Cisco IOS XR Router NDM Security Technical Implementation Guide
V3R62026-02-261 of 27 findings match
M1
Cisco NX OS Switch NDM Security Technical Implementation Guide
V3R22024-09-101 of 42 findings match
M1
Cisco NX OS Switch NDM Security Technical Implementation Guide
32025-05-191 of 42 findings match
M1
Dell OS10 Switch NDM Security Technical Implementation Guide
V1R12024-12-111 of 39 findings match
M1
F5 BIG-IP TMOS ALG Security Technical Implementation Guide
V1R22025-06-091 of 37 findings match
H1
F5 BIG-IP TMOS Firewall Security Technical Implementation Guide
V1R12024-09-091 of 14 findings match
H1
F5 BIG-IP TMOS VPN Security Technical Implementation Guide
V1R12024-09-091 of 12 findings match
H1
F5 NGINX Security Technical Implementation Guide
V1R12026-01-071 of 32 findings match
M1
Fortinet FortiGate Firewall NDM Security Technical Implementation Guide
V1R52025-11-191 of 60 findings match
M1
Fortinet FortiGate Firewall NDM Security Technical Implementation Guide
12023-06-011 of 60 findings match
M1
Fortinet FortiGate Firewall Security Technical Implementation Guide
12022-09-121 of 29 findings match
H1
Fortinet FortiGate Firewall Security Technical Implementation Guide
V1R42025-11-191 of 29 findings match
H1
HP FlexFabric Switch NDM Security Technical Implementation Guide
V1R42025-06-121 of 79 findings match
M1
HPE Aruba Networking AOS VPN Security Technical Implementation Guide
V1R12024-10-291 of 21 findings match
M1
Infoblox 8.x DNS Security Technical Implementation Guide
V1R22025-03-111 of 71 findings match
M1
Ivanti Connect Secure VPN Security Technical Implementation Guide
V2R22025-09-091 of 15 findings match
M1
Ivanti Connect Secure VPN Security Technical Implementation Guide
22024-06-101 of 15 findings match
M1
Juniper EX Series Switches Network Device Management Security Technical Implementation Guide
V2R42025-12-101 of 56 findings match
M1
Juniper EX Series Switches Network Device Management Security Technical Implementation Guide
22025-03-071 of 56 findings match
M1
Juniper Router NDM Security Technical Implementation Guide
V3R22024-12-051 of 49 findings match
M1
Juniper SRX Services Gateway VPN Security Technical Implementation Guide
V3R22024-12-201 of 28 findings match
M1
Network Device Management Security Requirements Guide
V5R32025-02-111 of 104 findings match
M1
Network Device Management Security Requirements Guide
V5R42025-09-101 of 105 findings match
M1
Palo Alto Networks IDPS Security Technical Implementation Guide
V3R22024-12-191 of 29 findings match
M1
Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide
V2R32026-02-131 of 31 findings match
M1
Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide
22024-12-061 of 31 findings match
M1
RUCKUS ICX NDM Security Technical Implementation Guide
V1R12025-05-281 of 25 findings match
M1
SDN Controller Security Requirements Guide
22024-05-281 of 34 findings match
M1
Symantec ProxySG NDM Security Technical Implementation Guide
V1R22019-12-201 of 32 findings match
M1
Web / Application Server
8 STIGs
Web / Application Server
8 STIGsApplication Security and Development Security Technical Implementation Guide
62025-02-122 of 286 findings match
M2
Application Security and Development Security Technical Implementation Guide
V6R42025-09-092 of 286 findings match
M2
Microsoft Exchange 2016 Edge Transport Server Security Technical Implementation Guide
V2R62024-12-062 of 68 findings match
M2
Application Server Security Requirements Guide
V4R42025-09-101 of 137 findings match
M1
Microsoft Exchange 2016 Mailbox Server Security Technical Implementation Guide
V2R62023-12-181 of 64 findings match
M1
Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide
V2R22024-12-061 of 68 findings match
M1
Microsoft Exchange 2019 Mailbox Server Security Technical Implementation Guide
V2R32025-05-141 of 66 findings match
M1
Web Server Security Requirements Guide
V4R42025-09-101 of 126 findings match
M1
Virtualization / Container
12 STIGs
Virtualization / Container
12 STIGsVirtual Machine Manager Security Requirements Guide
22024-12-063 of 193 findings match
M3
Virtual Machine Manager Security Requirements Guide
V2R32025-09-103 of 198 findings match
M3
VMware NSX 4.x Tier-0 Gateway Router Security Technical Implementation Guide
V1R22024-12-133 of 16 findings match
H2M1
VMware NSX-T Tier-0 Gateway RTR Security Technical Implementation Guide
V1R22022-09-013 of 16 findings match
M2L1
Container Platform Security Requirements Guide
V2R42025-09-102 of 188 findings match
M2
Container Platform Security Requirements Guide
22025-05-152 of 187 findings match
M2
Mirantis Kubernetes Engine Security Technical Implementation Guide
V2R12024-08-272 of 44 findings match
M2
Red Hat OpenShift Container Platform 4.x Security Technical Implementation Guide
22025-05-152 of 83 findings match
M2
Show 4 more STIGs in this category →Hide additional STIGs
Red Hat OpenShift Container Platform 4.x Security Technical Implementation Guide
V2R52025-12-042 of 83 findings match
M2
VMware NSX 4.x Tier-1 Gateway Router Security Technical Implementation Guide
V1R22024-12-201 of 4 findings match
H1
VMware NSX-T Distributed Firewall Security Technical Implementation Guide
V1R32023-06-231 of 7 findings match
M1
VMware NSX-T Tier 1 Gateway RTR Security Technical Implementation Guide
V1R12022-03-091 of 4 findings match
H1
Cloud / Identity Service
1 STIG
Cloud / Identity Service
1 STIGOkta Identity as a Service (IDaaS) Security Technical Implementation Guide
V1R22025-11-192 of 29 findings match
M2
Endpoint Security Management
9 STIGs
Endpoint Security Management
9 STIGsTanium 7.x Security Technical Implementation Guide
V2R32025-05-148 of 98 findings match
M8
Tanium 7.x Application on TanOS Security Technical Implementation Guide
V2R22025-02-117 of 75 findings match
M7
Intrusion Detection and Prevention Systems Security Requirements Guide
V3R42025-09-224 of 60 findings match
M4
Intrusion Detection and Prevention Systems Security Requirements Guide
32025-05-193 of 58 findings match
M3
Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide
V2R22023-08-233 of 21 findings match
M3
Ivanti Sentry 9.x ALG Security Technical Implementation Guide
V3R12024-09-252 of 32 findings match
M2
HYCU Protege Security Technical Implementation Guide
V1R22026-03-041 of 55 findings match
M1
HYCU Protege Security Technical Implementation Guide
12024-10-291 of 55 findings match
M1
Show 1 more STIG in this category →Hide additional STIGs
Ivanti Sentry 9.x NDM Security Technical Implementation Guide
V3R12024-09-251 of 26 findings match
L1
Productivity Application
4 STIGs
Productivity Application
4 STIGsGoogle Chrome Current Windows Security Technical Implementation Guide
V2R112025-05-153 of 46 findings match
M3
Microsoft Edge Security Technical Implementation Guide
V2R52026-02-251 of 61 findings match
L1
Microsoft Edge Security Technical Implementation Guide
22025-05-151 of 59 findings match
L1
SPEC Innovations Innoslate 4.x Security Technical Implementation Guide
V1R12022-08-311 of 11 findings match
M1
Uncategorized
2 STIGs
Uncategorized
2 STIGsMicrosoft Internet Explorer 11 Security Technical Implementation Guide
22023-12-0110 of 137 findings match
M10
Microsoft SharePoint 2013 Security Technical Implementation Guide
22024-12-103 of 37 findings match
H1M2