Assessment Objective

Determine if:

• information about remote access mechanisms is protected from unauthorized use and disclosure.

Assessment Methods

Examine

• Access control policy
• procedures addressing remote access to the system
• system security plan
• other relevant documents or records

Interview

• Personnel with responsibilities for implementing or monitoring remote access to the system
• system users with knowledge of information about remote access mechanisms
• personnel with information security responsibilities

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final