+MA-04(06) Cryptographic Protection
|
MA-04(06) Cryptographic Protection
Control
Implement the following cryptographic mechanisms to protect the integrity and confidentiality of nonlocal maintenance and diagnostic communications: [Assignement: cryptographic mechanisms].
Discussion
Failure to protect nonlocal maintenance and diagnostic communications can result in unauthorized individuals gaining access to organizational information. Unauthorized access during remote maintenance sessions can result in a variety of hostile actions, including malicious code insertion, unauthorized changes to system parameters, and exfiltration of organizational information. Such actions can result in the loss or degradation of mission or business capabilities.
Assessment Objective
- [Assignement: cryptographic mechanisms] are implemented to protect the integrity of nonlocal maintenance and diagnostic communications;
- [Assignement: cryptographic mechanisms] are implemented to protect the confidentiality of nonlocal maintenance and diagnostic communications.
Assessment Method
Examine
Maintenance policy
procedures addressing nonlocal system maintenance
system design documentation
system configuration settings and associated documentation
cryptographic mechanisms protecting nonlocal maintenance activities
maintenance records
diagnostic records
audit records
system security plan
other relevant documents or records
Interview
Organizational personnel with system maintenance responsibilities
network engineers
organizational personnel with information security responsibilities
system/network administrators
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|