Assessment Objective
Determine if:
- SC-04(02) unauthorized information transfer via shared resources is prevented in accordance with [Assignment: procedures] when system processing explicitly switches between different information classification levels or security categories.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing information protection in shared system resources
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
- system developer
Test
- Mechanisms preventing the unauthorized transfer of information via shared system resources
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | SC-04(02) Multilevel or Periods Processing |