+SI-04(10) Visibility of Encrypted Communications

SI-04(10) Visibility of Encrypted Communications

Control

Make provisions so that [Assignement: encrypted communications traffic] is visible to [Assignement: system monitoring tools and mechanisms].

Discussion

Organizations balance the need to encrypt communications traffic to protect data confidentiality with the need to maintain visibility into such traffic from a monitoring perspective. Organizations determine whether the visibility requirement applies to internal encrypted traffic, encrypted traffic intended for external destinations, or a subset of the traffic types.

Assessment Objective

provisions are made so that [Assignement: encrypted communications traffic] is visible to [Assignement: system monitoring tools and mechanisms].

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing system monitoring tools and techniques system design documentation system monitoring tools and techniques documentation system configuration settings and associated documentation system protocols system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities organizational personnel installing, configuring, and/or maintaining the system organizational personnel responsible for monitoring the system organizational personnel responsible for the intrusion detection system

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by SI-04(10) Visibility of Encrypted Communications – Assessment Procedure
is blocked by Visibility of Encrypted Communications