Assessment Objective
Determine if:
- SA-23 [Selection (one or more): design modification; augmentation; reconfiguration] is employed on [Assignment: systems or system components] supporting essential services or functions to increase the trustworthiness in those systems or components.
Assessment Methods
Examine
- System and services acquisition policy
- procedures addressing design modification, augmentation, or reconfiguration of systems or system components
- documented evidence of design modification, augmentation, or reconfiguration
- system security plan
- supply chain risk management plan
- other relevant documents or records
Interview
- Organizational personnel with system and service acquisition responsibilities
- organizational personnel with information security responsibilities
- organizational personnel with the responsibility for security architecture
- organizational personnel responsible for configuration management
Test
- Organizational processes for the modification of design, augmentation, or reconfiguration of systems or system components
- mechanisms supporting and/or implementing design modification, augmentation, or reconfiguration of systems or system components
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | SA-23 Specialization |