+AC-03(12) Assert and Enforce Application Access

AC-03(12) Assert and Enforce Application Access

Control

  1. Require applications to assert, as part of the installation process, the access needed to the following system applications and functions: [Assignement: system applications and functions];
  2. Provide an enforcement mechanism to prevent unauthorized access; and
  3. Approve access changes after initial installation of the application.

Discussion

Asserting and enforcing application access is intended to address applications that need to access existing system applications and functions, including user contacts, global positioning systems, cameras, keyboards, microphones, networks, phones, or other files.

Assessment Objective

  1. as part of the installation process, applications are required to assert the access needed to the following system applications and functions: [Assignement: system applications and functions];
  2. an enforcement mechanism to prevent unauthorized access is provided;
  3. access changes after initial installation of the application are approved.

Assessment Method

Examine

Access control policy procedures addressing access enforcement system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

Organizational personnel with access enforcement responsibilities system/network administrators organizational personnel with information security responsibilities

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
is blocked by AC-03(12) Assert and Enforce Application Access – Assessment Procedure