Control: The information system appropriately labels information in storage, in process, and in transmission.

Supplemental Guidance: Automated labeling refers to labels employed on internal data structures (e.g., records, files) within the information system. Information labeling is accomplished in accordance with: (i) access control requirements; (ii) special dissemination, handling, or distribution instructions; or (iii) as otherwise required to enforce information system security policy.

Control Enhancements: (0) None.

Baseline: LOW Not Selected MOD Not Selected HIGH Not Selected

Family: Access Control

Class: Technical

ISO 17799 mapping: 7.2.2

COBIT 4.1 mapping: PO2.3, DS11.6