Assessment Objective
Determine if:
- MA-04(06)[01] [Assignment: cryptographic mechanisms] are implemented to protect the integrity of nonlocal maintenance and diagnostic communications;
- MA-04(06)[02] [Assignment: cryptographic mechanisms] are implemented to protect the confidentiality of nonlocal maintenance and diagnostic communications.
Assessment Methods
Examine
- Maintenance policy
- procedures addressing nonlocal system maintenance
- system design documentation
- system configuration settings and associated documentation
- cryptographic mechanisms protecting nonlocal maintenance activities
- maintenance records
- diagnostic records
- audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system maintenance responsibilities
- network engineers
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Cryptographic mechanisms protecting nonlocal maintenance and diagnostic communications
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | MA-04(06) Cryptographic Protection |