Assessment Objective
Determine if:
- IA-05(05) developers and installers of system components are required to provide unique authenticators or change default authenticators prior to delivery and installation.
Assessment Methods
Examine
- Identification and authentication policy
- system security plan
- system and services acquisition policy
- procedures addressing authenticator management
- procedures addressing the integration of security requirements into the acquisition process
- acquisition documentation
- acquisition contracts for system procurements or services
- other relevant documents or records
Interview
- Organizational personnel with authenticator management responsibilities
- organizational personnel with information security, acquisition, and contracting responsibilities
- system developers
Test
- Mechanisms supporting and/or implementing authenticator management capability
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | IA-05(05) Change Authenticators Prior to Delivery |