When transferring information between different security domains, the router must use organization-defined data type identifiers to validate data essential for information flow decisions.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-279001 | SRG-NET-000324-RTR-000001 | SV-279001r1137951_rule | CCI-002201 | medium |
| Description | ||||
| Information flow decisions based on invalid data may allow unintended and unauthorized data flows, and therefore, risk the confidentiality of information. They may also result in the unauthorized release (spill) of information. Data type identifiers include, for example, file names, file types, file signatures/tokens, and multiple internal file signatures/tokens. Information systems may allow transfer of data only if compliant with data type format specifications. This requirement applies to routers that transfer information between different security domains (e.g., cross-domain solutions). This requirement also applies to Zero Trust initiatives. | ||||
| STIG | Date | |||
| Router Security Requirements Guide | 2025-09-10 | |||
Related Frameworks
1 mapping across 3 frameworks
Related Frameworks
SCF0 mappings
No source states a mapping between these directly.
Also reachable in 3 hops (1) derived by us, not asserted by any source
Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.
- DISA STIG Benchmark (XCCDF)V5R2intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
- SCF Secure Traceability Relationship Mapping (STRM)2026.2equal to
NIST 800-530 mappings
No source states a mapping between these directly.
Also reachable in 2 hops (2) derived by us, not asserted by any source
Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.
- DISA STIG Benchmark (XCCDF)V5R2intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
- DISA STIG Benchmark (XCCDF)V5R2intersects(normalised)
- DISA STIG Benchmark (XCCDF)2our copyintersects(normalised)
- DISA STIG Benchmark (XCCDF)2intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
CCI1 mapping
CCI-002201
1.00
- DISA STIG Benchmark (XCCDF)V5R2intersects(normalised)
Details
Check Text (C-279001r1137951_chk)
When transferring information between different security domains, verify the router is configured to use organization-defined data type identifiers to validate data essential for information flow decisions.
If the router does not use organization-defined data type identifiers to validate data essential for information flow decisions, when transferring information between different security domains, this is a finding.
Fix Text (F-83454r1137950_fix)
Configure the router to use organization-defined data type identifiers to validate data essential for information flow decisions, when transferring information between different security domains.