Assessment Objective
Determine if:
- dual authorization for the deletion or destruction of [Assignment: system backup information] is enforced.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing system backup
- contingency plan
- system design documentation
- system configuration settings and associated documentation
- system-generated list of dual authorization credentials or rules
- logs or records of the deletion or destruction of backup information
- system security plan
- other relevant documents or records
Interview
- Personnel with system backup responsibilities
- personnel with information security responsibilities
Test
- Mechanisms supporting and/or implementing dual authorization
- mechanisms supporting and/or implementing the deletion and/or destruction of backup information
Συνδεδεμένα ζητήματα
| Τύπος σύνδεσης | Ζήτημα |
|---|---|
| blocks | 03.08.02E Dual Authorization for System Backup Deletion and Destruction |