Implement the security design principle of trusted communications channels in [Assignment: organization-defined systems or system components].
|
|
| Control Identifier | SA-8(18) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | The principle of trusted communication channels states that when composing a system where there is a potential threat to communications between components (i.e., the interconnections between components), each communication channel is trustworthy to a level commensurate with the security dependencies it supports (i.e., how much it is trusted by other components to perform its security functions). Trusted communication channels are achieved by a combination of restricting access to the communication channel (to ensure an acceptable match in the trustworthiness of the endpoints involved in the communication) and employing end-to-end protections for the data transmitted over the communication channel (to protect against interception and modification and to further increase the assurance of proper end-to-end communication). |
| Related Controls | SC-8, SC-12, SC-13. |