AC-04.5 ยท Embedded Data Types

Control Description

Enforce {{ insert: param, ac-04.05_odp }} on embedding data types within other data types.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
system
Enhancement
Control Statement
The control requirements

Enforce {{ insert: param, ac-04.05_odp }} on embedding data types within other data types.

Supplemental Guidance

Embedding data types within other data types may result in reduced flow control effectiveness. Data type embedding includes inserting files as objects within other files and using compressed or archived data types that may include multiple embedded data types. Limitations on data type embedding consider the levels of embedding and prohibit levels of data type embedding that are beyond the capability of the inspection tools.