+AC-17(02) Protection of Confidentiality and Integrity Using Encryption

AC-17(02) Protection of Confidentiality and Integrity Using Encryption

Control

Implement cryptographic mechanisms to protect the confidentiality and integrity of remote access sessions.

Discussion

Virtual private networks can be used to protect the confidentiality and integrity of remote access sessions. Transport Layer Security (TLS) is an example of a cryptographic protocol that provides end-to-end communications security over networks and is used for Internet communications and online transactions.

Assessment Objective

cryptographic mechanisms are implemented to protect the confidentiality and integrity of remote access sessions.

Assessment Method

Examine

Access control policy procedures addressing remote access to the system system design documentation system configuration settings and associated documentation cryptographic mechanisms and associated configuration documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developers

1. Yleiskatsaus

Otsikko Standardi

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset
Lähde Vaatimus

3. Liittyvät säädökset

Säädökset
Lähde Sääntely

Linkitetyt tehtävät