Assessment Objective
Determine if:
- SC-28(02)[01] [Assignment: information] is removed from online storage;
- SC-28(02)[02] [Assignment: information] is stored offline in a secure location.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing the protection of information at rest
- system design documentation
- system configuration settings and associated documentation
- cryptographic mechanisms and associated configuration documentation
- offline storage locations for information at rest
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
Test
- Mechanisms supporting and/or implementing the removal of information from online storage
- mechanisms supporting and/or implementing storage of information offline
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | SC-28(02) Offline Storage |