Assessment Objective
Determine if:
- a system use notification message with privacy and security notices consistent with applicable CUI rules is displayed before granting access to the system.
Assessment Methods
Examine
- access control policy and procedures
- privacy and security policies, procedures for system use notification
- documented approval of system use notification messages
- system audit records
- user acknowledgements of system use notification messages
- system design documentation
- system configuration settings
- system use notification messages
- system security plan
- other relevant documents or records
Interview
- personnel with information security responsibilities
- legal counsel
- system developers
- system administrators
Test
- mechanisms for implementing system use notifications
Συνδεδεμένα ζητήματα
| Τύπος σύνδεσης | Ζήτημα |
|---|---|
| blocks | 03.01.09 System Use Notification |