information flow enforcement

A security control mechanism that governs *where* and *between which entities* data may travel within a system or across system boundaries, as distinct from access control, which governs *who* may read or write data. Information flow control regulates where information can travel within a system and between systems — in contrast to who is allowed to access the information — and without regard to subsequent accesses to that information. Organizations commonly employ information flow control policies and enforcement mechanisms to control the flow of information between designated sources and destinations within and between connected systems; flow control is based on the characteristics of the information and/or the information path, and enforcement occurs in boundary protection devices that employ rule sets, packet-filtering based on header information, or message-filtering based on message content. The concept is broader than simple firewalling because it can include data classification and context-aware rules; in a cybersecurity governance context it is discussed alongside confidentiality, segregation of duties, and containment.

Advisory only. A term this product ships is defined by an authority document, not by a search result.