Assessment Objective
Determine if:
- the following types of cryptography are implemented to protect the confidentiality of CUI: [Assignment: types of cryptography].
Assessment Methods
Examine
- system and communications protection policy and procedures
- procedures for cryptographic protection
- system design documentation
- system configuration settings
- cryptographic module validation certificates
- list of FIPS-validated cryptographic modules
- system audit records
- system security plan
- other relevant documents or records
Interview
- personnel with responsibilities for cryptographic protection
- personnel with information security responsibilities
- system developers
- system administrators
Test
- mechanisms for supporting or implementing cryptographic protection
Incidencias vinculadas
| Tipo de vínculo | Incidencia |
|---|---|
| blocks | 03.13.11 Cryptographic Protection |