Assessment Objective
Determine if:
- SI-16 [Assignment: controls] are implemented to protect the system memory from unauthorized code execution.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing memory protection for the system
- system design documentation
- system configuration settings and associated documentation
- list of security safeguards protecting system memory from unauthorized code execution
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel responsible for memory protection
- organizational personnel with information security responsibilities
- system/network administrators
- system developer
Test
- Automated mechanisms supporting and/or implementing safeguards to protect the system memory from unauthorized code execution
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | SI-16 [M] Memory Protection |