SC-31(3): Measure Bandwidth in Operational Environments

Control Family:

System and Communications Protection

Parent Control:

SC-31: Covert Channel Analysis

CSF v1.1 References:

PR.PT-4

Threats Addressed:

Information Disclosure
Lateral Movement

Baselines:

(Not part of any baseline)

Previous Version:

NIST Special Publication 800-53 Revision 4:
SC-31(3): Measure Bandwidth In Operational Environments

Control Statement

Measure the bandwidth of [Assignment: organization-defined subset of identified covert channels] in the operational environment of the system.

Supplemental Guidance

Measuring covert channel bandwidth in specified operational environments helps organizations determine how much information can be covertly leaked before such leakage adversely affects mission or business functions. Covert channel bandwidth may be significantly different when measured in settings that are independent of the specific environments of operation, including laboratories or system development environments.