+SC-31(03) Measure Bandwidth in Operational Environments

SC-31(03) Measure Bandwidth in Operational Environments

Control

Measure the bandwidth of [Assignement: subset of identified covert channels] in the operational environment of the system.

Discussion

Measuring covert channel bandwidth in specified operational environments helps organizations determine how much information can be covertly leaked before such leakage adversely affects mission or business functions. Covert channel bandwidth may be significantly different when measured in settings that are independent of the specific environments of operation, including laboratories or system development environments.

Assessment Objective

the bandwidth of [Assignement: subset of identified covert channels] is measured in the operational environment of the system.

Assessment Method

Examine

System and communications protection policy procedures addressing covert channel analysis system design documentation system configuration settings and associated documentation covert channel analysis documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities organizational personnel with covert channel analysis responsibilities system developers/integrators

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by SC-31(03) Measure Bandwidth in Operational Environments – Assessment Procedure