Assessment Objective

Determine if:

• SC-31(03) the bandwidth of [Assignment: subset of identified covert channels] is measured in the operational environment of the system.

Assessment Methods

Examine

• System and communications protection policy
• procedures addressing covert channel analysis
• system design documentation
• system configuration settings and associated documentation
• covert channel analysis documentation
• system audit records
• system security plan
• other relevant documents or records

Interview

• System/network administrators
• organizational personnel with information security responsibilities
• organizational personnel with covert channel analysis responsibilities
• system developers/integrators

Test

• Organizational process for conducting covert channel analysis
• mechanisms supporting and/or implementing covert channel analysis
• mechanisms supporting and/or implementing the capability to measure the bandwidth of covert channels

Incidencias vinculadas

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final