+AU-10(01) Association of Identities
|
AU-10(01) Association of Identities
Control
- Bind the identity of the information producer with the information to [Assignement: strength of binding] ; and
- Provide the means for authorized individuals to determine the identity of the producer of the information.
Discussion
Binding identities to the information supports audit requirements that provide organizational personnel with the means to identify who produced specific information in the event of an information transfer. Organizations determine and approve the strength of attribute binding between the information producer and the information based on the security category of the information and other relevant risk factors.
Assessment Objective
- the identity of the information producer is bound with the information to [Assignement: strength of binding];
- the means for authorized individuals to determine the identity of the producer of the information is provided.
Assessment Method
Examine
Audit and accountability policy
system security plan
privacy plan
procedures addressing non-repudiation
system design documentation
system configuration settings and associated documentation
system audit records
other relevant documents or records
Interview
Organizational personnel with information security and privacy responsibilities
system/network administrators
system developers
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|