|
+AC-17(06) Protection of Mechanism Information |
AC-17(06) Protection of Mechanism InformationControlProtect information about remote access mechanisms from unauthorized use and disclosure.DiscussionRemote access to organizational information by non-organizational entities can increase the risk of unauthorized use and disclosure about remote access mechanisms. The organization considers including remote access requirements in the information exchange agreements with other organizations, as applicable. Remote access requirements can also be included in rules of behavior (see [PL-4](#pl-4) ) and access agreements (see [PS-6](#ps-6)).Assessment Objectiveinformation about remote access mechanisms is protected from unauthorized use and disclosure.Assessment MethodExamineAccess control policy procedures addressing remote access to the system system security plan other relevant documents or recordsInterviewOrganizational personnel with responsibilities for implementing or monitoring remote access to the system system users with knowledge of information about remote access mechanisms organizational personnel with information security responsibilities1. Resumen
1.1 Referencias1.2 Requisitos identificados1.3 Regulaciones relacionadas2. Requisitos identificados
3. Regulaciones relacionadas
Incidencias vinculadas
|