Assessment Objective
Determine if:
- SC-28(01)[01] cryptographic mechanisms are implemented to prevent unauthorized disclosure of [Assignment: information] at rest on [Assignment: system components or media];
- SC-28(01)[02] cryptographic mechanisms are implemented to prevent unauthorized modification of [Assignment: information] at rest on [Assignment: system components or media].
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing the protection of information at rest
- system design documentation
- system configuration settings and associated documentation
- cryptographic mechanisms and associated configuration documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
- system developer
Test
- Cryptographic mechanisms implementing confidentiality and integrity protections for information at rest
Kapcsolt feladatok
| Kapcsolattípus | Feladat |
|---|---|
| blocks | SC-28(01) [M] Cryptographic Protection |