+CA-09(01) Compliance Checks
|
CA-09(01) Compliance Checks
Control
Perform security and privacy compliance checks on constituent system components prior to the establishment of the internal connection.
Discussion
Compliance checks include verification of the relevant baseline configuration.
Assessment Objective
- security compliance checks are performed on constituent system components prior to the establishment of the internal connection;
- privacy compliance checks are performed on constituent system components prior to the establishment of the internal connection.
Assessment Method
Examine
Assessment, authorization, and monitoring policy
access control policy
procedures addressing system connections
system and communications protection policy
system design documentation
system configuration settings and associated documentation
list of components or classes of components authorized as internal system connections
assessment report
system audit records
system security plan
privacy plan
other relevant documents or records
Interview
Organizational personnel with responsibilities for developing, implementing, or authorizing internal system connections
organizational personnel with information security and privacy responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|