Assessment Objective
Determine if:
- PE-22 [Assignment: system hardware components] are marked indicating the impact level or classification level of the information permitted to be processed, stored, or transmitted by the hardware component.
Assessment Methods
Examine
- Physical and environmental protection policy
- procedures addressing component marking
- list of component marking security attributes
- component inventory
- information types and their impact/classification level
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with component marking responsibilities
- organizational personnel with component inventory responsibilities
- organizational personnel with information categorization/classification responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for component marking
- automated mechanisms supporting and/or implementing component marking
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | PE-22 Component Marking |