Assessment Objective
Determine if:
- SI-07(01)[01] an integrity check of [Assignment: software] is performed [Selection (one or more): at startup; at [Assignment: transitional states or security-relevant events] ; [Assignment: frequency] ];
- SI-07(01)[02] an integrity check of [Assignment: firmware] is performed [Selection (one or more): at startup; at [Assignment: transitional states or security-relevant events] ; [Assignment: frequency] ];
- SI-07(01)[03] an integrity check of [Assignment: information] is performed [Selection (one or more): at startup; at [Assignment: transitional states or security-relevant events] ; [Assignment: frequency] ].
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing software, firmware, and information integrity testing
- system design documentation
- system configuration settings and associated documentation
- integrity verification tools and associated documentation
- records of integrity scans
- system security plan
- other relevant documents or records
Interview
- Organizational personnel responsible for software, firmware, and/or information integrity
- organizational personnel with information security responsibilities
- system/network administrators
- system developer
Test
- Software, firmware, and information integrity verification tools
Kapcsolt feladatok
| Kapcsolattípus | Feladat |
|---|---|
| blocks | SI-07(01) [H] Integrity Checks |