SC-08(02) Pre- and Post-transmission Handling
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
Pre- and Post-transmission Handling
Control
Maintain the [Selection (one or more): confidentiality; integrity] of information during preparation for transmission and during reception.
Discussion
Information can be unintentionally or maliciously disclosed or modified during preparation for transmission or during reception, including during aggregation, at protocol transformation points, and during packing and unpacking. Such unauthorized disclosures or modifications compromise the confidentiality or integrity of the information.
Parameters
sc-08.02_odp: [confidentiality; integrity]
STIG rules that implement this control 17
Application Security and Development V6R5
- APSC-DV-002460 CAT II The application must maintain the confidentiality and integrity of information during preparation for transmission.
- APSC-DV-002470 CAT II The application must maintain the confidentiality and integrity of information during reception.
- APSC-DV-002480 CAT II The application must not disclose unnecessary information to users.
- APSC-DV-002485 CAT I The application must not store sensitive information in hidden fields.
Canonical Ubuntu 22.04 LTS V2R10
- UBTU-22-255010 CAT I Ubuntu 22.04 LTS must have SSH installed.
- UBTU-22-255015 CAT I Ubuntu 22.04 LTS must use SSH to protect the confidentiality and integrity of transmitted information.
Canonical Ubuntu 24.04 LTS V1R7
- UBTU-24-100800 CAT I Ubuntu 24.04 LTS must have SSH installed.
- UBTU-24-100810 CAT I Ubuntu 24.04 LTS must use SSH to protect the confidentiality and integrity of transmitted information.
Microsoft Windows Server 2022 V2R11
- WN22-00-000260 CAT II Windows Server 2022 must implement protection methods such as TLS, encrypted VPNs, or IPsec if the data owner has a strict requirement for ensuring data integrity and confidentiality is maintained at every step of the data transfer and handling process.
Microsoft Windows Server 2025 V1R4
- WN25-00-000260 CAT II Windows Server 2025 must implement protection methods such as TLS, encrypted VPNs, or IPsec if the data owner has a strict requirement for ensuring data integrity and confidentiality is maintained at every step of the data transfer and handling process.
- WN25-SH-000010 CAT II Windows Server 2025 networked systems must have and implement OpenSSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.
Red Hat Enterprise Linux 10 V1R3
- RHEL-10-200720 CAT II RHEL 10 must have a Secure Shell (SSH) server installed for all networked systems.
- RHEL-10-200721 CAT II RHEL 10 must, for all networked systems, have and implement Secure Shell (SSH) to protect the confidentiality and integrity of transmitted and received information.
- RHEL-10-300080 CAT I RHEL 10 must implement DoW-approved encryption in the bind package.
Red Hat Enterprise Linux 9 V2R10
- RHEL-09-255010 CAT II All RHEL 9 networked systems must have SSH installed.
- RHEL-09-255015 CAT II All RHEL 9 networked systems must have and implement SSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.
- RHEL-09-672050 CAT I RHEL 9 must implement DoW-approved encryption in the bind package.