+SC-02(02) Disassociability
|
SC-02(02) Disassociability
Control
Store state information from applications and software separately.
Discussion
If a system is compromised, storing applications and software separately from state information about users’ interactions with an application may better protect individuals’ privacy.
Assessment Objective
state information is stored separately from applications and software.
Assessment Method
Examine
System and communications protection policy
procedures addressing application and software partitioning
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
privacy plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security and privacy responsibilities
system developer
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|