Assessment Objective
Determine if:
- CM-07(03) [Assignment: registration requirements] are complied with.
Assessment Methods
Examine
- System security plan
- configuration management policy
- procedures addressing least functionality in the system
- configuration management plan
- system configuration settings and associated documentation
- system component inventory
- audit and compliance reviews
- system audit records
- other relevant documents or records
Interview
- Organizational personnel with security responsibilities
- system/network administrators
- system developers
Test
- Organizational processes ensuring compliance with registration requirements for functions, ports, protocols, and/or services
- mechanisms implementing compliance with registration requirements for functions, ports, protocols, and/or services
Saincheisteanna nasctha
| Cineál naisc | Saincheist |
|---|---|
| blocks | CM-07(03) Registration Compliance |