Assessment Objective

Determine if:

• SI-03(04) malicious code protection mechanisms are updated only when directed by a privileged user.

Assessment Methods

Examine

• System and information integrity policy
• system and information integrity procedures
• procedures addressing malicious code protection
• list of privileged users on system
• system design documentation
• malicious code protection mechanisms
• records of malicious code protection updates
• system configuration settings and associated documentation
• system audit records
• system security plan
• other relevant documents or records

Interview

• System/network administrators
• organizational personnel with information security responsibilities
• system developers
• organizational personnel installing, configuring, and/or maintaining the system
• organizational personnel responsible for malicious code protection

Test

• Mechanisms supporting and/or implementing malicious code protection capabilities

Lingitud teemad

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final