+SA-17(08) Orchestration
|
SA-17(08) Orchestration
Control
Design [Assignement: critical systems] with coordinated behavior to implement the following capabilities: [Assignement: capabilities].
Discussion
Security resources that are distributed, located at different layers or in different system elements, or are implemented to support different aspects of trustworthiness can interact in unforeseen or incorrect ways. Adverse consequences can include cascading failures, interference, or coverage gaps. Coordination of the behavior of security resources (e.g., by ensuring that one patch is installed across all resources before making a configuration change that assumes that the patch is propagated) can avert such negative interactions.
Assessment Objective
[Assignement: critical systems] are designed with coordinated behavior to implement [Assignement: capabilities].
Assessment Method
Examine
System and services acquisition policy
enterprise architecture policy
procedures addressing developer security and privacy architecture and design
enterprise architecture
security architecture
solicitation documentation
acquisition documentation
service level agreements
acquisition contracts for the system, system component, or system service
system design documentation
system configuration settings and associated documentation
developer documentation describing design orchestration
system security plan
privacy plan
other relevant documents or records
Interview
Organizational personnel with system and service acquisition responsibilities
organizational personnel with information security and privacy responsibilities
system developer
organizational personnel with information security architecture responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|