PRO-09 Content filtering
3 actions under this Protect principle in ASD Essentials for enterprise IT. Each action links to plain-English guidance, audit tips and cross-framework mappings.
ASD principle statement
Data communicated between different security domains for systems (infrastructure and applications) is controlled and subject to inspection and verification.
Quoted as published. Everything else on this page is written by Control Stack.
The three actions
- IT.PRO-09.1Inspect Outbound Content on Egress Paths to Detect Unauthorised Data Transfers
Checks what leaves the organisation, by email, web upload or other routes, to spot sensitive or high-value data sent without approval.
Domains:Boundary servicesIdentity servicesCritical processes and servicesPrivileged environmentsBusiness systems - IT.PRO-09.2Block Outbound Connections to Known Malicious and Untrusted Destinations Using Threat Intelligence
Blocks systems from connecting out to websites and servers known to be dangerous or untrusted.
Domains:Boundary servicesCritical processes and services - IT.PRO-09.3Inspect All Inbound Content Channels and Block Malicious or Unsafe Content
Checks content coming in from outside or untrusted sources, and stops anything harmful before it is delivered.
Domains:Boundary servicesCritical processes and services
Back to the full Essentials for enterprise IT action list, or browse the complete control library.