Assessment Objective
Determine if:
- the use of mobile code is authorized.
- the use of mobile code is monitored.
- the use of mobile code is controlled.
- acceptable mobile code is defined.
- acceptable mobile code technologies are defined.
Assessment Methods
Examine
- system and communications protection policy and procedures
- procedures for mobile code
- mobile code implementation policy and procedures
- list of acceptable mobile code and mobile code technologies
- authorization records
- system monitoring records
- system audit records
- system security plan
- other relevant documents or records
Interview
- personnel with responsibilities for managing mobile code
- personnel with information security responsibilities
- system administrators
Test
- processes for authorizing, monitoring, and controlling mobile code
- mechanisms for supporting or implementing the management of mobile code
- mechanisms for supporting or implementing mobile code monitoring
Tickets liés
| Type de lien | Ticket |
|---|---|
| blocks | 03.13.13 Mobile Code |