# A Proposal for a Zero-Trust-Based Multi-Level Security Model and Its Security Controls
## 4 Proposed Security Controls for the Zero-Trust-Based MLS Model and Its Robustness
### Security Controls
\begin{table}
\begin{tabular}{l l l l l} \hline \hline \multicolumn{1}{c}{**Control**} & \multicolumn{1}{c}{**Specific Controls**} & \multicolumn{1}{c}{**C**} & \multicolumn{1}{c}{**S**} & \multicolumn{1}{c}{**O**} \\ \hline AC-1 & AC-1-1: Dual Authorisation & \(\surd\) & \(\surd\) & \(\surd\) \\ Access Enforcement & AC-1-2: Assert and Enforce Application Access & \(\surd\) & \(\surd\) & \(\surd\) \\ (AC-3) & AC-1-3: Discretionary and Mandatory Access Control & \(\surd\) & \(\surd\) & \(\surd\) \\ \hline \multirow{9}{*}{AC-2} & AC-2-1: Automated System Account Management & \(\surd\) & \(\surd\) & \\  & AC-2-2: Disable Accounts & \(\surd\) & \(\surd\) & \(\surd\) \\  & AC-2-3: Automated Audit Action & \(\surd\) & \(\surd\) & \\ \cline{1-1} AC-2 & AC-2-4: Incativity Logout & \(\surd\) & \(\surd\) & \\ Account Management & AC-2-5: Dynamic Privilege Management & \(\surd\) & \(\surd\) & \(\surd\) \\ (AC-2) & AC-2-6: Privileged User Accounts & \(\surd\) & \(\surd\) & \(\surd\) \\  & AC-2-7: Dynamic Account Management & \(\surd\) & \(\surd\) & \(\surd\) \\  & AC-2-8: Account Monitoring for Atypical Usage & \(\surd\) & \(\surd\) & \(\surd\) \\ \hline \multirow{9}{*}{AC-3} & AC-3: Object Security and Privacy Attributes & \(\surd\) & \(\surd\) & \(\surd\) \\  & AC-3-2: Dynamic Information Flow Control & \(\surd\) & \(\surd\) & \(\surd\) \\  & AC-3-3: Flow Control of Encrypted Information & \(\surd\) & \(\surd\) & \(\surd\) \\  & AC-3-4: One-Way Flow Mechanism & \(\surd\) & \(\surd\) & \\  & AC-3-5: Security and Privacy Policy Filters & \(\surd\) & \(\surd\) & \(\surd\) \\  & AC-3-6: Human Reviews & \(\surd\) & \(\surd\) & \\ Information Flow Enforcement & AC-3-7: Data Type Identifiers & \(\surd\) & \(\surd\) & \\ (AC-4) & AC-3-8: Detection of Unsanctioned Information & \(\surd\) & \(\surd\) & \(\surd\) \\  & AC-3-9: Approved Solutions & \(\surd\) & \(\surd\) & \(\surd\) \\  & AC-3-10: Physical or Logical Separation of Information Flows & \(\surd\) & \(\surd\) & \\  & AC-3-11: Modify Non-Release Information & \(\surd\) & \(\surd\) & \(\surd\) \\  & AC-3-12: Data Santiisation & \(\surd\) & \(\surd\) & \(\surd\) \\  & AC-3-13: Filter Orchestration Engines & \(\surd\) & \(\surd\) & \(\surd\) \\ \hline AC-4 & AC-4-1: Timeout Warning Message & \(\surd\) & \(\surd\) & \\ \cline{1-1} AC-6 & AC-6-1: Protection of Confidentiality and Integrity Using Encryption & \(\surd\) & \(\surd\) & \\ Remote Access & AC-6-2: Privileged Commands and Access & \(\surd\) & \(\surd\) & \\ (AC-17) & AC-6-3: Disconnect or Disable Access & \(\surd\) & \(\surd\) & \\  & AC-6-4: Authenticate Remote Commands & \(\surd\) & \(\surd\) & \\ \hline AC-7 & AC-7-1: Authentication and Encryption & \(\surd\) & \(\surd\) & \\ Wireless Access & \(\surd\) & \(\surd\) & \\ (AC-18) & AC-7-2: Disable Wireless Networking & \(\surd\) & \(\surd\) & \\ \hline AC-8 & AC-8-1: Restrictions for Classified Information & \(\surd\) & \(\surd\) & \\ Access Control for Mobile Devices (AC-19) & AC-8-2: Full-Device- or Container-Based Encryption & \(\surd\) & \(\surd\) & \\ \hline AC-9 & AC-9-1: Limits on Authorised Use & \(\surd\) & \(\surd\) & \\ External Systems & AC-9-2: Non-Organisationally Owned Systems: Restricted Use & \(\surd\) & \(\surd\) & \\ (AC-20) & AC-9-3: Network Accessible Storage Devices: Prohibited Use & \(\surd\) & \(\surd\) & \\ \hline AC-10 & AC-10-1: Transmit Access Authorisation Information & \(\surd\) & \(\surd\) & \(\surd\) \\ Access Control Decisions & (AC-24) & AC-10-2: No User of Process Identity & \(\surd\) & \(\surd\) & \(\surd\) \\ \hline SC-6 & \multicolumn{2}{l}{Collaborative Computing Devices and Applications (SC-15)} & \multicolumn{2}{l}{SC-6-1: Physical or Logical Disconnect} & \(\surd\) & \(\surd\) \\ \hline \hline \end{tabular}
\end{table} 
Table 10: PEP security controls.