Assessment Objective
Determine if:
- systems or system components with the following configurations are issued to individuals traveling to high-risk locations: [Assignment: configurations].
- the following security requirements are applied to the system or system components when the individuals return from travel: [Assignment: security requirements].
Assessment Methods
Examine
- configuration management policy and procedures
- configuration management plan
- procedures for the baseline configuration of the system
- procedures for system component installations and upgrades
- system component inventory
- system component installations or upgrades and associated records
- records of system baseline configuration reviews and updates
- system configuration settings
- system architecture
- change control records
- system security plan
- other relevant documents or records
Interview
- personnel with configuration management responsibilities
- personnel with information security responsibilities
- system administrators
Test
- processes for managing baseline configurations
Свързани задачи
| Тип връзка | Задача |
|---|---|
| blocks | 03.04.12 System and Component Configuration for High-Risk Areas |