Assessment Objective
Determine if:
- SI-07(03) centrally managed integrity verification tools are employed.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing software, firmware, and information integrity
- system design documentation
- system configuration settings and associated documentation
- integrity verification tools and associated documentation
- records of integrity scans
- system security plan
- other relevant documents or records
Interview
- Organizational personnel responsible for the central management of integrity verification tools
- organizational personnel with information security responsibilities
Test
- Mechanisms supporting and/or implementing the central management of integrity verification tools
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | SI-07(03) Centrally Managed Integrity Tools |