+AC-21(02) Information Search and Retrieval

AC-21(02) Information Search and Retrieval

Control

Implement information search and retrieval services that enforce [Assignement: information-sharing restrictions].

Discussion

Information search and retrieval services identify information system resources relevant to an information need.

Assessment Objective

information search and retrieval services that enforce [Assignement: information-sharing restrictions] are implemented.

Assessment Method

Examine

Access control policy procedures addressing user-based collaboration and information sharing (including restrictions) system design documentation system configuration settings and associated documentation system-generated list of access restrictions regarding information to be shared information search and retrieval records system audit records system security plan other relevant documents or records

Interview

Organizational personnel with access enforcement responsibilities for system search and retrieval services system/network administrators organizational personnel with information security responsibilities system developers

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by AC-21(02) Information Search and Retrieval – Assessment Procedure
is blocked by Information Search & Retrieval