Assessment Objective

Determine if:

• AC-16(03)[01] the association and integrity of [Assignment: security attributes] to [Assignment: subjects] is maintained;
• AC-16(03)[02] the association and integrity of [Assignment: security attributes] to [Assignment: objects] is maintained.
• AC-16(03)[03] the association and integrity of [Assignment: privacy attributes] to [Assignment: subjects] is maintained;
• AC-16(03)[04] the association and integrity of [Assignment: privacy attributes] to [Assignment: objects] is maintained.

Assessment Methods

Examine

• Access control policy
• procedures addressing the association of security and privacy attributes to information
• procedures addressing labeling or marking
• system design documentation
• system configuration settings and associated documentation
• system security plan
• privacy plan
• other relevant documents or records

Interview

• Organizational personnel with information security and privacy responsibilities
• system developers

Test

• Mechanisms maintaining association and integrity of security and privacy attributes to information

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final