+AC-18(04) [H] Restrict Configurations by Users
|
AC-18(04) [H] Restrict Configurations by Users
Control
Identify and explicitly authorize users allowed to independently configure wireless networking capabilities.
Discussion
Organizational authorizations to allow selected users to configure wireless networking capabilities are enforced, in part, by the access enforcement mechanisms employed within organizational systems.
Assessment Objective
- users allowed to independently configure wireless networking capabilities are identified;
- users allowed to independently configure wireless networking capabilities are explicitly authorized.
Assessment Method
Examine
Access control policy
procedures addressing wireless implementation and usage (including restrictions)
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|