The family states the rules of the functions that implement an information flow policy, including the attributes used and the treatment of illicit flows. Components: FDP_IFF.1 Simple security attributes, FDP_IFF.2 Hierarchical security attributes, FDP_IFF.3 Limited illicit information flows, FDP_IFF.4 Partial elimination of illicit information flows, FDP_IFF.5 No illicit information flows and FDP_IFF.6 Illicit information flow monitoring.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.