+SC-34(02) Integrity Protection on Read-only Media

SC-34(02) Integrity Protection on Read-only Media

Control

Protect the integrity of information prior to storage on read-only media and control the media after such information has been recorded onto the media.

Discussion

Controls prevent the substitution of media into systems or the reprogramming of programmable read-only media prior to installation into the systems. Integrity protection controls include a combination of prevention, detection, and response.

Assessment Objective

  1. the integrity of information is protected prior to storage on read-only media;
  2. the media is controlled after such information has been recorded onto the media;

Assessment Method

Examine

System and communications protection policy procedures addressing non-modifiable executable programs system design documentation system configuration settings and associated documentation system architecture system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities organizational personnel installing, configuring, and/or maintaining the system system developers/integrators

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by SC-34(02) Integrity Protection on Read-only Media – Assessment Procedure