+CM-06(02) [H] Respond to Unauthorized Changes

CM-06(02) [H] Respond to Unauthorized Changes

Control

Take the following actions in response to unauthorized changes to [Assignement: configuration settings]: [Assignement: actions].

Discussion

Responses to unauthorized changes to configuration settings include alerting designated organizational personnel, restoring established configuration settings, or—in extreme cases—halting affected system processing.

Assessment Objective

[Assignement: actions] are taken in response to unauthorized changes to [Assignement: configuration settings].

Assessment Method

Examine

System security plan privacy plan configuration management policy procedures addressing configuration settings for the system configuration management plan system design documentation system configuration settings and associated documentation alerts/notifications of unauthorized changes to system configuration settings system component inventory documented responses to unauthorized changes to system configuration settings change control records system audit records other relevant documents or records

Interview

Organizational personnel with security configuration management responsibilities organizational personnel with security and privacy responsibilities system/network administrators

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
is blocked by CM-06(02) [H] Respond to Unauthorized Changes – Assessment Procedure
is blocked by Respond To Unauthorized Changes