BaselineWatch
Desk

AC-04(02) Processing Domains

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged AC part of AC-4

Title

Processing Domains

Control

Use protected processing domains to enforce [Assignment: information flow control policies] as a basis for flow control decisions.

Discussion

Protected processing domains within systems are processing spaces that have controlled interactions with other processing spaces, enabling control of information flows between these spaces and to/from information objects. A protected processing domain can be provided, for example, by implementing domain and type enforcement. In domain and type enforcement, system processes are assigned to domains, information is identified by types, and information flows are controlled based on allowed information accesses (i.e., determined by domain and type), allowed signaling among domains, and allowed process transitions to other domains.

Parameters

ac-04.02_odp: information flow control policies

Related controls

sc-39

Assessment objective

AC-04(02) protected processing domains are used to enforce [Assignment: information flow control policies] as a basis for flow control decisions.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).