Assessment Objective
Determine if:
- SC-24 [Assignment: types of system failures on system components] fail to a [Assignment: known system state] while preserving [Assignment: system state information] in failure.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing system failure to known state
- system design documentation
- system configuration settings and associated documentation
- list of failures requiring system to fail in a known state
- state information to be preserved in system failure
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
- system developer
Test
- Mechanisms supporting and/or implementing the fail in known state capability
- mechanisms preserving system state information in the event of a system failure
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | SC-24 [H] Fail in Known State |