Assessment Objective
Determine if:
- SI-22a. [Assignment: alternative information sources] for [Assignment: essential functions and services] are identified;
- SI-22b. an alternative information source is used for the execution of essential functions or services on [Assignment: systems or system components] when the primary source of information is corrupted or unavailable.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- personally identifiable information processing policy
- system design documentation
- system configuration settings and associated documentation
- list of information sources
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with information security and privacy responsibilities
- organizational personnel with systems security engineering responsibilities
- system developers
Test
- Automated methods and mechanisms to convert information from an analog to digital medium
Lingitud teemad
| Lingi tüüp | Teema |
|---|---|
| blocks | SI-22 Information Diversity |