Assessment Objective
Determine if:
- SC-05(02) capacity, bandwidth, or other redundancies to limit the effects of information flooding denial-of-service attacks are managed.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing denial-of-service protection
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
- organizational personnel with incident response responsibilities
- system developer
Test
- Mechanisms implementing the management of system bandwidth, capacity, and redundancy to limit the effects of information flooding denial-of-service attacks
Linkitetyt tehtävät
| Linkin tyyppi | Tehtävä |
|---|---|
| blocks | SC-05(02) Capacity, Bandwidth, and Redundancy |