SIP-018 — Information-Flow Segmentation [Dido Solutions, Inc Wiki]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== SIP-018 — Information-Flow Segmentation ======

[[public:00-sip-ra:99-annexes:annex-c-requirements:start|Go to Annex C: Requirements]]

===== Statement =====

The information-flow Model SHALL define mechanisms for enforcing segmentation based on applicable [[public:99_annexes:annex-b-terms-and-definitions:g:governance|Governance]] or security constraints.

===== Rationale =====

Not all structured information may flow among all architectural elements, Domains, Jurisdictions, or security environments. Governance and security constraints may restrict which information can move, where it can move, who may receive it, and which processing may be applied.

Explicit segmentation mechanisms allow the Reference Architecture to constrain information flows according to applicable Policies and authorities. They also make the placement and effect of enforcement visible for review, verification, and Traceability.

===== Evaluation Criteria =====

The Submission satisfies this requirement when the information-flow Model:

  - Represents information-flow segments and the boundaries between them
  - Associates each segment with its applicable Governance and security constraints
  - Defines architectural points at which segmentation constraints are evaluated or enforced
  - Supports restriction of a flow according to its source, destination, content, context, or applicable Policy
  - Represents whether a flow is permitted, rejected, filtered, redirected, or transformed
  - Prevents information from bypassing the applicable segmentation mechanisms
  - Preserves Traceability to the constraint and Authority governing an enforcement decision
  - Supports recording of rejected or modified flows when required by the applicable Policy
  - Defines segmentation independently of a required implementation technology

===== Referenced By =====

{{backlinks>public:00-sip-ra:99-annexes:annex-c-requirements:sip-018-information-flow-segmentation}}

===== Notes for Editors =====

Segmentation may reflect Governance boundaries, organizational boundaries, Jurisdictional boundaries, security classifications, trust zones, compartments, information-handling restrictions, or other applicable constraints.

The Reference Architecture defines the mechanisms and relationships required for enforcement. Individual realizations select the technologies used to implement them.

----

<WRAP centeralign>
© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
</WRAP>