Assessment Objective
Determine if:
- MA-03(02) media containing diagnostic and test programs are checked for malicious code before the media are used in the system.
Assessment Methods
Examine
- Maintenance policy
- procedures addressing system maintenance tools
- system maintenance tools and associated documentation
- maintenance records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system maintenance responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational process for inspecting media for malicious code
- mechanisms supporting and/or implementing the inspection of media used for maintenance
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | MA-03(02) [H] Inspect Media |