Assessment Objective
Determine if:
- IR-09(04) [Assignment: controls] are employed for personnel exposed to information not within assigned access authorizations.
Assessment Methods
Examine
- Incident response policy
- procedures addressing incident response
- procedures addressing information spillage
- incident response plan
- system security plan
- security safeguards regarding information spillage/exposure to unauthorized personnel
- other relevant documents or records
Interview
- Organizational personnel with incident response responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for dealing with information exposed to unauthorized personnel
- mechanisms supporting and/or implementing safeguards for personnel exposed to information not within assigned access authorizations
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | IR-09(04) Exposure to Unauthorized Personnel |