+AC-16(05) Attribute Displays on Objects to Be Output
|
AC-16(05) Attribute Displays on Objects to Be Output
Control
Display security and privacy attributes in human-readable form on each object that the system transmits to output devices to identify [Assignement: instructions] using [Assignement: naming conventions].
Discussion
System outputs include printed pages, screens, or equivalent items. System output devices include printers, notebook computers, video displays, smart phones, and tablets. To mitigate the risk of unauthorized exposure of information (e.g., shoulder surfing), the outputs display full attribute values when unmasked by the subscriber.
Assessment Objective
- security attributes are displayed in human-readable form on each object that the system transmits to output devices to identify [Assignement: instructions] using [Assignement: naming conventions];
- privacy attributes are displayed in human-readable form on each object that the system transmits to output devices to identify [Assignement: instructions] using [Assignement: naming conventions].
Assessment Method
Examine
Access control policy
procedures addressing display of security and privacy attributes in human-readable form
special dissemination, handling, or distribution instructions
types of human-readable, standard naming conventions
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
privacy plan
other relevant documents or records
Interview
Organizational personnel with information security and privacy responsibilities
system developers
1. Übersicht
1.1 Referenzen
1.2 Identifizierte Anforderungen
1.3 Zugehörige Regulierungen
2. Identifizierte Anforderungen
Anforderungen
| Quelle |
Anforderung |
3. Zugehörige Regulierungen
Regulierungen
| Quelle |
Regulierung |
Verknüpfte Vorgänge
|