Cross Domain Releasability Controls and Mitigations Project Proposal

1
Cross Domain Releasability Controls and
MitigationsProject Proposal

• John Mildner, CISSP
• CSCE 727 S06

2
Background

• Organizations transfer data between domains of
  differing security policy.
• Modern office and engineering productivity
  application data storage objects can retain
  sensitive data that is not readily apparent to
  the user.
• Data spillage results when these objects are
  transferred to a domain with a security policy
  insufficient to protect the information
• When data is spilled to enclaves within the
  control of the organization, actions are required
  within those enclaves to prevent further
  propagation of the data.

3
Example
4
Example
5
Procedures

• Conduct open source review for relevant
  information (e.g., studies and policy documents).
• Review policies and procedures of parent company.
• Interview professional peers and determine their
  practices using venue of ISSA, ISC2, etc.
• From the research select industry best practices
  and future trends.
• Develop business case alternatives and select a
  strategy appropriate for Acme Blivet Co.

6
Deliverables

• Identification of relevant policies.
• Identification of ongoing technology
  developments.
• Identification of applicable procedures.
• Identification of deficiencies in ABC policies,
  procedures, and technology.
• A strategy for overcoming these deficiencies.

7
Your recommendations