The application must validate the binding of the reviewers identity to the information at the transfer/release point prior to release/transfer from one security domain to another security domain.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32353	SRG-APP-000084-DB-NA	SV-42690r1_rule		Medium

Description
This non-repudiation control enhancement is intended to mitigate the risk that information could be modified between review and transfer/release particularly when transfer is occurring between security domains. In those instances where the application is transferring data intended for release across security domains, the application must validate the binding of the reviewer’s identity to the information at the transfer/release point prior to release/transfer from one security domain to another security domain. This requirement is specific to applications responsible for managing data crossing security domains. This is NA for databases.

Description

This non-repudiation control enhancement is intended to mitigate the risk that information could be modified between review and transfer/release particularly when transfer is occurring between security domains. In those instances where the application is transferring data intended for release across security domains, the application must validate the binding of the reviewer’s identity to the information at the transfer/release point prior to release/transfer from one security domain to another security domain. This requirement is specific to applications responsible for managing data crossing security domains. This is NA for databases.

STIG	Date
Database Security Requirements Guide	2012-07-02

Details

Check Text ( C-40799r1_chk )
This check is NA for databases.

Fix Text (F-36266r1_fix)
This fix is NA for databases.