Assessment Objective
Determine if:
- SC-11a. a [Selection: physically; logically] isolated trusted communication path is provided for communications between the user and the trusted components of the system;
- SC-11b. users are permitted to invoke the trusted communication path for communications between the user and the [Assignment: security functions] of the system, including authentication and re-authentication, at a minimum.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing trusted communication paths
- security plan
- system design documentation
- system configuration settings and associated documentation
- assessment results from independent, testing organizations
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
- system developer
Test
- Mechanisms supporting and/or implementing trusted communication paths
Incidencias vinculadas
| Tipo de vínculo | Incidencia |
|---|---|
| blocks | SC-11 Trusted Path |