+AC-16(08) Association Techniques and Technologies
|
AC-16(08) Association Techniques and Technologies
Control
Implement [Assignement: organization-defined techniques and technologies] in associating security and privacy attributes to information.
Discussion
The association of security and privacy attributes to information within systems is important for conducting automated access enforcement and flow enforcement actions. The association of such attributes to information (i.e., binding) can be accomplished with technologies and techniques that provide different levels of assurance. For example, systems can cryptographically bind attributes to information using digital signatures that support cryptographic keys protected by hardware devices (sometimes known as hardware roots of trust).
Assessment Objective
- [Assignement: techniques and technologies] are implemented in associating security attributes to information;
- [Assignement: techniques and technologies] are implemented in associating privacy attributes to information.
Assessment Method
Examine
Access control policy
procedures addressing association of security and privacy attributes to information
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
privacy plan
other relevant documents or records
Interview
Organizational personnel with responsibilities for associating security and privacy attributes to information
organizational personnel with information security and privacy responsibilities
system developers
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|