SC-31(2): Maximum Bandwidth

Control Family:

System And Communications Protection

Parent Control:

SC-31: Covert Channel Analysis

Priority:

P0: Security control not selected in any baseline.

CSF v1.1 References:

PR.DS-5

Threats Addressed:

Information Disclosure
Lateral Movement

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
SC-31(2): Maximum Bandwidth

Control Statement

The organization reduces the maximum bandwidth for identified covert [Selection (one or more); storage; timing] channels to [Assignment: organization-defined values].

Supplemental Guidance

Information system developers are in the best position to reduce the maximum bandwidth for identified covert storage and timing channels.