NIST 800-53 Rev. 5

SC-31(3): Covert Channel Analysis | Measure Bandwidth in Operational Environments

Control Text:

Measure the bandwidth of [Assignment: organization-defined subset of identified covert channels] in the operational environment of the system.

Measuring covert channel bandwidth in specified operational environments helps organizations determine how much information can be covertly leaked before such leakage adversely affects mission or business functions. Covert channel bandwidth may be significantly different when measured in settings that are independent of the specific environments of operation, including laboratories or system development environments.

Related Controls

  • None