ICD 503 compliance
On June 5, 1999, the Director of Central Intelligence Issued Directive 6/3 (DCID 6/3) titled "Protecting Sensitive Compartmented Information Within Information Systems." It establishes the security policy and procedures for storing, processing, and communicating classified intelligence information in information systems. An implementation manual corresponding to DCID 6/3 was published on May 24, 2000.
The directive applies to all United States government organizations’, their commercial contractors', and Allied governments' information systems that process, store, or communicate intelligence information.
IS Decisions solutions fulfil the following DCID 6/3 requirements for dealing with information system security:
| DCID 6/3 Requirements
| IS Decisions Aptitude
| IS Decisions Solution
| IS Decisions solution's features
|
| Identification and Authentification |
Control |
UserLock |
Simultaneous session prevention/restriction |
| Auditing procedures |
Know |
FileAudit |
Identification of users accessing files or folders |
| UserLock |
Comprehensive session list (logon, lock, unlock, logoff instances, users, domains, workstations...) |
| User notification |
Act |
UserLock |
User notification prior to gaining access to a system |
| Enforcement of sessions controls |
Control |
UserLock |
Simultaneous session prevention/restriction |
Helpful resources
DCID 6/3 Policy
DCID 6/3 Manual
Summary
You should be interested in: