Agencies must control data flow in one-way gateways between networks of different classifications using the devices set out in the table in this control (PP means Protection Profile). High network RESTRICTED: to an UNCLASSIFIED or RESTRICTED low network, an EAL2 or PP diode. High network CONFIDENTIAL: to an UNCLASSIFIED, RESTRICTED or CONFIDENTIAL low network, a high assurance diode. High network SECRET: to an UNCLASSIFIED, RESTRICTED, CONFIDENTIAL or SECRET low network, a high assurance diode. High network TOP SECRET: to an UNCLASSIFIED, RESTRICTED, CONFIDENTIAL, SECRET or TOP SECRET low network, a high assurance diode.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.