03.12.05 Information Exchange

This policy outlines the procedures for securely exchanging Controlled Unclassified Information (CUI) between this system and other systems. It covers the approval and management of CUI exchanges, documentation of interface characteristics and security requirements, and the regular review and update of relevant agreements.

• A.03.12.05.ODP[01]: one or more of the following PARAMETER VALUES are selected: {interconnection security agreements; information exchange security agreements; memoranda of understanding or agreement; service-level agreements; user agreements; non-disclosure agreements; other types of agreements}.
• A.03.12.05.ODP[02]: the frequency at which to review and update agreements is defined.
• A.03.12.05.a[01]: the exchange of CUI between the system and other systems is approved using <A.03.12.05.ODP[01]: SELECTED PARAMETER VALUES>.
• A.03.12.05.a[02]: the exchange of CUI between the system and other systems is managed using <A.03.12.05.ODP[01]: SELECTED PARAMETER VALUES>.
• A.03.12.05.b[01]: interface characteristics for each system are documented as part of the exchange agreements.
• A.03.12.05.b[02]: security requirements for each system are documented as part of the exchange agreements.
• A.03.12.05.b[03]: responsibilities for each system are documented as part of the exchange agreements.
• A.03.12.05.c[01]: exchange agreements are reviewed <A.03.12.05.ODP[02]: frequency>.
• A.03.12.05.c[02]: exchange agreements are updated <A.03.12.05.ODP[02]: frequency>.