+SI-03(06) Testing and Verification
|
SI-03(06) Testing and Verification
Control
- Test malicious code protection mechanisms [Assignement: frequency] by introducing known benign code into the system; and
- Verify that the detection of the code and the associated incident reporting occur.
Discussion
None.
Assessment Objective
- malicious code protection mechanisms are tested [Assignement: frequency] by introducing known benign code into the system;
- the detection of (benign test) code occurs;
- the associated incident reporting occurs.
Assessment Method
Examine
System and information integrity policy
system and information integrity procedures
procedures addressing malicious code protection
system design documentation
system configuration settings and associated documentation
test cases
records providing evidence of test cases executed on malicious code protection mechanisms
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
organizational personnel installing, configuring, and/or maintaining the system
organizational personnel responsible for malicious code protection
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|