Assessment Objective
Determine if:
- information about remote access mechanisms is protected from unauthorized use and disclosure.
Assessment Methods
Examine
- Access control policy
- procedures addressing remote access to the system
- system security plan
- other relevant documents or records
Interview
- Personnel with responsibilities for implementing or monitoring remote access to the system
- system users with knowledge of information about remote access mechanisms
- personnel with information security responsibilities