Front cover - IBM Redbooks

Figure 2-7 Access control and subsystem processes
68 Lotus Security Handbook
Information flow control subsystem
The purpose of an information flow control subsystem in an IT solution is to
enforce security policies by gating the flow of information within a computing
solution, affecting the visibility of information within a computing solution, and
ensuring the integrity of information flowing within a computing solution. The
information flow control subsystem may depend upon trusted credentials and
access control mechanisms.
This subsystem may feed event information to the security audit subsystem,
which may provide real-time or forensic analysis of events. The information flow
control subsystem may take corrective action based upon alert notification from
the security audit subsystem. From Common Criteria, an information flow control
subsystem may include the following functional requirements: