+SC-31(01) Test Covert Channels for Exploitability

SC-31(01) Test Covert Channels for Exploitability

Control

Test a subset of the identified covert channels to determine the channels that are exploitable.

Discussion

None.

Assessment Objective

a subset of the identified covert channels is tested to determine the channels that are exploitable.

Assessment Method

Examine

System and communications protection policy procedures addressing covert channel analysis system design documentation system configuration settings and associated documentation list of covert channels covert channel analysis documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities organizational personnel with covert channel analysis responsibilities

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by SC-31(01) Test Covert Channels for Exploitability – Assessment Procedure