Enforce the use of human reviews for [Assignment: organization-defined information flows] under the following conditions: [Assignment: organization-defined conditions].
|
|
| Control Identifier | AC-4(9) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | Organizations define security or privacy policy filters for all situations where automated flow control decisions are possible. When a fully automated flow control decision is not possible, then a human review may be employed in lieu of or as a complement to automated security or privacy policy filtering. Human reviews may also be employed as deemed necessary by organizations. |
| Related Controls | None. |