Assessment Objective

Determine if:

• AC-17(06) information about remote access mechanisms is protected from unauthorized use and disclosure.

Assessment Methods

Examine

• Access control policy
• procedures addressing remote access to the system
• system security plan
• other relevant documents or records

Interview

• Organizational personnel with responsibilities for implementing or monitoring remote access to the system
• system users with knowledge of information about remote access mechanisms
• organizational personnel with information security responsibilities

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final