AC-03.5 ยท Security-relevant Information

Control Description

Prevent access to {{ insert: param, ac-03.05_odp }} except during secure, non-operable system states.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
system
Enhancement
Control Statement
The control requirements

Prevent access to {{ insert: param, ac-03.05_odp }} except during secure, non-operable system states.

Supplemental Guidance

Security-relevant information is information within systems that can potentially impact the operation of security functions or the provision of security services in a manner that could result in failure to enforce system security and privacy policies or maintain the separation of code and data. Security-relevant information includes access control lists, filtering rules for routers or firewalls, configuration parameters for security services, and cryptographic key management information. Secure, non-operable system states include the times in which systems are not performing mission or business-related processing, such as when the system is offline for maintenance, boot-up, troubleshooting, or shut down.

Related NIST Controls
Other NIST 800-53 controls related to this one