Assessment Objective
Determine if:
- AU-13(03) discovery techniques, processes, and tools are employed to determine if external entities are replicating organizational information in an unauthorized manner.
Assessment Methods
Examine
- Audit and accountability policy
- system security plan
- privacy plan
- procedures addressing information disclosure monitoring
- procedures addressing information replication
- system design documentation
- system configuration settings and associated documentation
- system audit records
- training resources for staff to recognize the unauthorized use of organizational information
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for monitoring unauthorized replication of information
- organizational personnel with information security and privacy responsibilities
Test
- Discovery tools for identifying unauthorized information replication
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | AU-13(03) Unauthorized Replication of Information |