Assessment Objective
Determine if:
- the presence of unauthorized or misconfigured system components is detected using [Assignment: automated mechanisms].
- one or more of the following actions is/are taken when unauthorized or misconfigured system components are detected: [Assignment: SELECTED PARAMETER VALUE(S)].
Assessment Methods
Examine
- Configuration management policy
- procedures addressing system component inventory and configuration settings
- configuration management plan
- system configuration settings and associated documentation
- system component inventory
- system design documentation
- change control records
- common secure configuration checklists
- alerts or notifications of unauthorized components within the system
- system monitoring records
- system maintenance records
- system audit records
- system security plan
- other relevant documents or records
Interview
- Personnel with component inventory and security configuration management responsibilities
- personnel with responsibilities for managing automated mechanisms implementing unauthorized system component detection
- personnel with information security responsibilities
- system/network administrators
- system developers
Test
- Processes for the detection of unauthorized or misconfigured system components
- automated processes for taking action when unauthorized or misconfigured system components are detected
- automated mechanisms supporting and/or implementing the detection of unauthorized or misconfigured system components
- automated mechanisms supporting and/or implementing actions taken when unauthorized or misconfigured system components are detected
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | 03.04.02E Automated Unauthorized Component Detection |