Assessment Objective
Determine if:
- SI-21 the [Assignment: information] is refreshed [Assignment: frequencies] or is generated on demand and deleted when no longer needed.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- personally identifiable information processing policy
- procedures addressing software and information integrity
- system design documentation
- system configuration settings and associated documentation
- information refresh procedures
- list of information to be refreshed
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel responsible for refreshing information
- organizational personnel with information security and privacy responsibilities
- organizational personnel with systems security engineering responsibilities
- system developers
Test
- Mechanisms for information refresh
- organizational processes for information refresh
Συνδεδεμένα ζητήματα
| Τύπος σύνδεσης | Ζήτημα |
|---|---|
| blocks | SI-21 Information Refresh |