Assessment Objective
Determine if:
- SC-11(01)(a) a trusted communication path that is irrefutably distinguishable from other communication paths is provided;
- SC-11(01)(b) the trusted communication path for communications between the [Assignment: security functions] of the system and the user is initiated.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing trusted communication paths
- security plan
- system design documentation
- system configuration settings and associated documentation
- assessment results from independent, testing organizations
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
- system developer
Test
- Mechanisms supporting and/or implementing trusted communication paths
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | SC-11(01) Irrefutable Communications Path |