Assessment Objective
Determine if:
- SC-16(03) [Assignment: mechanisms or techniques] are implemented to bind security and privacy attributes to transmitted information.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing the transmission of security and privacy attributes
- access control policy and procedures
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
Test
- Mechanisms supporting and/or implementing anti-spoofing mechanisms
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | SC-16(03) Cryptographic Binding |