Assessment Objective
Determine if:
- MP-04(02)[01] access to media storage areas is restricted using [Assignment: automated mechanisms];
- MP-04(02)[02] access attempts to media storage areas are logged using [Assignment: automated mechanisms];
- MP-04(02)[03] access granted to media storage areas is logged using [Assignment: automated mechanisms].
Assessment Methods
Examine
- System media protection policy
- procedures addressing media storage
- access control policy and procedures
- physical and environmental protection policy and procedures
- system design documentation
- system configuration settings and associated documentation
- media storage facilities
- access control devices
- access control records
- audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system media protection and storage responsibilities
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Automated mechanisms restricting access to media storage areas
- automated mechanisms auditing access attempts and access granted to media storage areas
Povezani zadaci
| Vrsta poveznice | Zadatak |
|---|---|
| blocks | MP-04(02) Automated Restricted Access |