ISC CISSP

You have been approached by one of your clients. They are interested in doing some security re-engineering. The client is looking at various information security
models. It is a highly secure environment where data at high classifications cannot be leaked to subjects at lower classifications. Of primary concern to them, is the
identification of potential covert channel. As an Information Security Professional, which model would you recommend to the client?