+AU-10(04) Validate Binding of Information Reviewer Identity

AU-10(04) Validate Binding of Information Reviewer Identity

Control

  1. Validate the binding of the information reviewer identity to the information at the transfer or release points prior to release or transfer between [Assignement: security domains] ; and
  2. Perform [Assignement: actions] in the event of a validation error.

Discussion

Validating the binding of the information reviewer identity to the information at transfer or release points prevents the unauthorized modification of information between review and the transfer or release. The validation of bindings can be achieved by using cryptographic checksums. Organizations determine if validations are in response to user requests or generated automatically.

Assessment Objective

  1. the binding of the information reviewer identity to the information at the transfer or release points prior to release or transfer between [Assignement: security domains] is validated;
  2. [Assignement: actions] are performed in the event of a validation error.

Assessment Method

Examine

Audit and accountability policy system security plan privacy plan procedures addressing non-repudiation system design documentation system configuration settings and associated documentation validation records system audit records other relevant documents or records

Interview

Organizational personnel with information security and privacy responsibilities system/network administrators system developers

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by AU-10(04) Validate Binding of Information Reviewer Identity – Assessment Procedure