Assessment Objective
Determine if:
- SI-20 data or capabilities are embedded in [Assignment: systems or system components] to determine if organizational data has been exfiltrated or improperly removed from the organization.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- personally identifiable information processing policy
- procedures addressing software and information integrity
- system design documentation
- system configuration settings and associated documentation
- policy and procedures addressing the systems security engineering technique of deception
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel responsible for detecting tainted data
- organizational personnel with systems security engineering responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Automated mechanisms for post-breach detection
- decoys, traps, lures, and methods for deceiving adversaries
- detection and notification mechanisms
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | SI-20 Tainting |