+SC-18(02) Acquisition, Development, and Use
|
SC-18(02) Acquisition, Development, and Use
Control
Verify that the acquisition, development, and use of mobile code to be deployed in the system meets [Assignement: mobile code requirements].
Discussion
None.
Assessment Objective
- the acquisition of mobile code to be deployed in the system meets [Assignement: mobile code requirements];
- the development of mobile code to be deployed in the system meets [Assignement: mobile code requirements];
- the use of mobile code to be deployed in the system meets [Assignement: mobile code requirements].
Assessment Method
Examine
System and communications protection policy
procedures addressing mobile code
mobile code requirements
mobile code usage restrictions
mobile code implementation policy and procedures
acquisition documentation
acquisition contracts for system, system component, or system service
system development life cycle documentation
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
organizational personnel with responsibilities for managing mobile code
organizational personnel with acquisition and contracting responsibilities
1. Übersicht
1.1 Referenzen
1.2 Identifizierte Anforderungen
1.3 Zugehörige Regulierungen
2. Identifizierte Anforderungen
Anforderungen
| Quelle |
Anforderung |
3. Zugehörige Regulierungen
Regulierungen
| Quelle |
Regulierung |
Verknüpfte Vorgänge
|