Assessment Objective
Determine if:
- the use of the following types of system media is restricted or prohibited: [Assignment: types of system media].
- the use of removable system media without an identifiable owner is prohibited.
Assessment Methods
Examine
- system media protection policy and procedures
- system use policy
- procedures for media usage restrictions
- rules of behavior
- system audit records
- system design documentation
- system configuration settings
- system security plan
- other relevant documents or records
Interview
- personnel with system media use responsibilities
- personnel with information security responsibilities
- system administrators
Test
- processes for media use
- mechanisms for restricting or prohibiting the use of system media on systems or system components
Lingitud teemad
| Lingi tüüp | Teema |
|---|---|
| blocks | 03.08.07 Media Use |