+SC-02(02) Disassociability

SC-02(02) Disassociability

Control

Store state information from applications and software separately.

Discussion

If a system is compromised, storing applications and software separately from state information about users’ interactions with an application may better protect individuals’ privacy.

Assessment Objective

state information is stored separately from applications and software.

Assessment Method

Examine

System and communications protection policy procedures addressing application and software partitioning system design documentation system configuration settings and associated documentation system audit records system security plan privacy plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security and privacy responsibilities system developer

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
is blocked by SC-02(02) Disassociability – Assessment Procedure