+SA-23 Specialization
|
SA-23 Specialization
Control
Employ [Selection(one-or-more): design modification; augmentation; reconfiguration] on [Assignement: systems or system components] supporting mission essential services or functions to increase the trustworthiness in those systems or components.
Discussion
It is often necessary for a system or system component that supports mission-essential services or functions to be enhanced to maximize the trustworthiness of the resource. Sometimes this enhancement is done at the design level. In other instances, it is done post-design, either through modifications of the system in question or by augmenting the system with additional components. For example, supplemental authentication or non-repudiation functions may be added to the system to enhance the identity of critical resources to other resources that depend on the organization-defined resources.
Assessment Objective
[Selection(one-or-more): design modification; augmentation; reconfiguration] is employed on [Assignement: systems or system components] supporting essential services or functions to increase the trustworthiness in those systems or components.
Assessment Method
Examine
System and services acquisition policy
procedures addressing design modification, augmentation, or reconfiguration of systems or system components
documented evidence of design modification, augmentation, or reconfiguration
system security plan
supply chain risk management plan
other relevant documents or records
Interview
Organizational personnel with system and service acquisition responsibilities
organizational personnel with information security responsibilities
organizational personnel with the responsibility for security architecture
organizational personnel responsible for configuration management
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|