+SC-08(01) Cryptographic Protection
|
SC-08(01) Cryptographic Protection
Control
Implement cryptographic mechanisms to [Selection(one-or-more): prevent unauthorized disclosure of information; detect changes to information] during transmission.
Discussion
Encryption protects information from unauthorized disclosure and modification during transmission. Cryptographic mechanisms that protect the confidentiality and integrity of information during transmission include TLS and IPSec. Cryptographic mechanisms used to protect information integrity include cryptographic hash functions that have applications in digital signatures, checksums, and message authentication codes.
Assessment Objective
cryptographic mechanisms are implemented to [Selection(one-or-more): prevent unauthorized disclosure of information; detect changes to information] during transmission.
Assessment Method
Examine
System and communications protection policy
procedures addressing transmission confidentiality and integrity
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
system developer
1. Übersicht
1.1 Referenzen
1.2 Identifizierte Anforderungen
1.3 Zugehörige Regulierungen
2. Identifizierte Anforderungen
Anforderungen
| Quelle |
Anforderung |
3. Zugehörige Regulierungen
Regulierungen
| Quelle |
Regulierung |
Verknüpfte Vorgänge
|