SC-31(3): Measure Bandwidth in Operational Environments

CSF v1.1 References:

Baselines:

(Not part of any baseline)

Previous Version:

Control Statement

Measure the bandwidth of [Assignment: organization-defined subset of identified covert channels] in the operational environment of the system.

Supplemental Guidance

Measuring covert channel bandwidth in specified operational environments helps organizations determine how much information can be covertly leaked before such leakage adversely affects mission or business functions. Covert channel bandwidth may be significantly different when measured in settings that are independent of the specific environments of operation, including laboratories or system development environments.