+IR-09(04) Exposure to Unauthorized Personnel
|
IR-09(04) Exposure to Unauthorized Personnel
Control
Employ the following controls for personnel exposed to information not within assigned access authorizations: [Assignement: controls].
Discussion
Controls include ensuring that personnel who are exposed to spilled information are made aware of the laws, executive orders, directives, regulations, policies, standards, and guidelines regarding the information and the restrictions imposed based on exposure to such information.
Assessment Objective
[Assignement: controls] are employed for personnel exposed to information not within assigned access authorizations.
Assessment Method
Examine
Incident response policy
procedures addressing incident response
procedures addressing information spillage
incident response plan
system security plan
security safeguards regarding information spillage/exposure to unauthorized personnel
other relevant documents or records
Interview
Organizational personnel with incident response responsibilities
organizational personnel with information security responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|