trustworthy regrading mechanism

A validated, policy-governed process or control that an organization is authorized to use when changing the security classification, privacy attributes, or security labels assigned to information — distinguished from ad hoc or manual relabeling by the requirement that the process itself be verified as trustworthy (i.e., operating correctly, under authorization, and in conformance with defined policy exceptions) before it may alter any attribute. A regrading mechanism is a trusted process authorized to re-classify and re-label data in accordance with a defined policy exception, and validated regrading mechanisms provide the requisite levels of assurance for attribute reassignment activities. In practice, such mechanisms appear alongside controls such as one-way hardware information-flow enforcement as part of a suite of measures for reassigning security attributes and security labels when information must cross between systems representing different security domains. The modifier *trustworthy* signals not a vague quality but a specific assurance requirement: the mechanism must be validated using defined techniques or procedures, and security and privacy attributes may only be change

Advisory only. A term this product ships is defined by an authority document, not by a search result.