+AU-13(03) Unauthorized Replication of Information
|
AU-13(03) Unauthorized Replication of Information
Control
Employ discovery techniques, processes, and tools to determine if external entities are replicating organizational information in an unauthorized manner.
Discussion
The unauthorized use or replication of organizational information by external entities can cause adverse impacts on organizational operations and assets, including damage to reputation. Such activity can include the replication of an organizational website by an adversary or hostile threat actor who attempts to impersonate the web-hosting organization. Discovery tools, techniques, and processes used to determine if external entities are replicating organizational information in an unauthorized manner include scanning external websites, monitoring social media, and training staff to recognize the unauthorized use of organizational information.
Assessment Objective
discovery techniques, processes, and tools are employed to determine if external entities are replicating organizational information in an unauthorized manner.
Assessment Method
Examine
Audit and accountability policy
system security plan
privacy plan
procedures addressing information disclosure monitoring
procedures addressing information replication
system design documentation
system configuration settings and associated documentation
system audit records
training resources for staff to recognize the unauthorized use of organizational information
other relevant documents or records
Interview
Organizational personnel with responsibilities for monitoring unauthorized replication of information
organizational personnel with information security and privacy responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|