The organization:
a. Performs a covert channel analysis to identify those aspects of communications within the information system that are potential avenues for covert [Selection (one or more): storage; timing] channels; and
b. Estimates the maximum bandwidth of those channels.
