OUTPUT CONTROLS

1
OUTPUT CONTROLS

• Chapter 15

2
Inference Controls

• Prevent four types of compromise that can occur
• Positive compromise
• Negative compromise
• Exact compromise
• Approximate compromise

3
Restriction Controls

• Which limit the set of responses that will be
  provided to users to try to protect the
  confidentiality of data about persons in the
  database.

4
Perturbation Controls

• Which introduce some type of noise into the
  statistics calculated on the basis of records
  retrieved from the database. They can be
  exercised on the records used as input to a
  statistical function.

5
Batch Output Production and Distribution Controls

• Batch output is output that is produced at some
  operations facility and subsequently distributed
  to or collected by the custodians or users of the
  output
• Production and distribution controls over batch
  output are established to ensure that accurate,
  complete, and timely output is provided only to
  authorized custodians or users.

6

• Stationery supplies storage controls
• Report program execution controls
• Queuing/spooling/printer file controls
• Printing controls
• Report collection controls
• User/client services review controls
• Report distribution controls
• User output controls
• Storage controls
• Retention controls
• Destruction controls

7
Batch report design controls

• Report name
• Time and date of production
• Distribution list (including number of copies)
• Processing period covered
• Program producing the report
• Contact person
• Security classification
• Retention date
• Method of destruction
• Page heading
• Page number
• End of job marker

8
Online Output Production and Distribution Controls

• Source controls
• Distribution controls
• Communication controls
• Receipt controls
• Review controls
• Disposition controls
• Retention controls
• Deletion controls

9
Audit Trail Controls

• Accounting Audit Trail
• Shows what output was presented to users, who
  received the output, when the output was
  received, and what actions were subsequently
  taken with the output.
• Operations Audit Trail
• Maintain the record of resources consumed by
  components in the output subsystem to assimilate,
  produce, distribute, use, store, and dispose of
  various types of output.

10
Existence Controls

• Needed to recover output in the event that it is
  lost or destroyed.