Security domains and Trust Zones must only be cross-connected by means of an approved KVM, an approved gateway or an approved cross-domain solution. The accompanying table sets the assurance levels: RESTRICTED and all lower classifications to UNCLASSIFIED needs EAL2 or a PP; CONFIDENTIAL to UNCLASSIFIED, RESTRICTED or CONFIDENTIAL needs high assurance; SECRET to UNCLASSIFIED, RESTRICTED, CONFIDENTIAL or SECRET needs high assurance; and TOP SECRET to UNCLASSIFIED, RESTRICTED, CONFIDENTIAL, SECRET or TOP SECRET needs high assurance.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.