AU-10(04) Validate Binding of Information Reviewer Identity
All changes in this version
Title
Validate Binding of Information Reviewer Identity
Control
(a) Validate the binding of the information reviewer identity to the information at the transfer or release points prior to release or transfer between [Assignment: security domains] ; and
(b) Perform [Assignment: actions] in the event of a validation error.
Discussion
Validating the binding of the information reviewer identity to the information at transfer or release points prevents the unauthorized modification of information between review and the transfer or release. The validation of bindings can be achieved by using cryptographic checksums. Organizations determine if validations are in response to user requests or generated automatically.
Parameters
au-10.04_odp.01: security domains
au-10.04_odp.02: actions
Related controls
ac-16, ac-4
STIG rules that implement this control 0
No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).