Documents/NSISS/4: Information Safeguarding/4.2: Controls, Monitoring & Cross-Classification

4.2: Controls, Monitoring & Cross-Classification

Enhance Data-Level Controls, Automated Monitoring, and Cross-Classification Solutions

Other Information:

Technology also plays an important role in developing our safeguarding capabilities. Progress requires we move from network to data-level controls with application interoperability. Increasingly granular security controls will improve access to information regardless of where information flows and strengthen protection against unauthorized disclosure, dissemination, access, and modification of information. Automated continuous monitoring, paired with appropriate privacy protections, supports shared risk management and enables a near real-time picture of existing or emerging risks. The focus of information safeguarding efforts in the past was primarily bound to systems and networks at specific classification levels. Departments and agencies, however, often identify the need to securely share information across systems regardless of classification. Technologies, capabilities, and services such as shared computing further accelerate the need for cross-classification sharing. Consequently, we need technologies, standards, and common processes to support this critical emerging requirement.

Indicator(s):