Assessment Objective
Determine if:
- SI-14(03)[01] connections to the system are established on demand;
- SI-14(03)[02] connections to the system are terminated after [Selection: completion of a request; a period of non-use].
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing non-persistence for system components
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel responsible for limiting persistent connections
- organizational personnel with information security responsibilities
Test
- Organizational processes for limiting persistent connections
- automated mechanisms supporting and/or implementing non-persistent connectivity
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | SI-14(03) Non-persistent Connectivity |