Information Exchange
What is Information Exchange?
The sharing of information between organizations, departments, or systems, requiring security controls to protect data during transfer.
Terms that appear alongside information exchange
Each of these is named in at least one of the same controls as information exchange. The number is how many controls name both.
- policy 5 shared controls
- certification 4 shared controls
- authentication 3 shared controls
- information sharing 3 shared controls
- confidentiality 3 shared controls
- due diligence 3 shared controls
- health information exchange 3 shared controls
- encryption 2 shared controls
Frameworks that govern information exchange
What the standards actually require on information exchange
Requirements naming information exchange across 6 standards, quoted from the control text.
The methods and procedures for an exchange are tried out for information flow before requirements are fixed and deliverables are exchanged.
iso-19650-organisation-and-digitisation-of-information-about-buildings-and-civil-engineering-works-bim::4:5.1.2 · 5.1.2 Mobilization and testing prior to information exchange →Before CJI is exchanged, agencies put formal written agreements in place that specify the security controls, whatever the form of exchange (email, messaging, web services, fax, hard copy or systems that send, receive and store CJI);
fbi-cjis-security-policy::5.1.1 · 5.1.1 Information Exchange →The supervisor exchanges information with other authorities inside and outside its jurisdiction where necessary to check the suitability of an insurer's key persons and Significant Owners.
iais-insurance-core-principles-icps::5.6 · 5.6 Information exchange with other authorities to check suitability →AEO and Customs keep commercial and security-sensitive information confidential and use it only for its purpose, pursue electronic data exchange (discouraging paper and hand signatures), use international data standards without exceeding SAFE security data, an...
wco-safe-framework-of-standards-to-secure-and-facilitate-global-trade-2021::AEO.F · F. Information exchange, access and confidentiality →The operator and Customs protect entrusted information against misuse and unauthorised alteration, ensuring commercial and security sensitive information stays confidential and is used solely for the purpose for which it was provided, and pursuing timely elect...
AEO-9 · Information Exchange, Access and Confidentiality →Verify that individuals or systems transferring data between interconnecting systems have the requisite authorizations (i.e., write permissions or privileges) prior to accepting such data.
NIST800-CA-3(6) · CA-3(6) Information Exchange | Transfer Authorizations →Questions people ask about information exchange
What is Information Exchange?
Why is Information Exchange important for compliance?
Which compliance frameworks address Information Exchange?
Where can I learn more about Information Exchange?
See how Information Exchange applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.