+AC-21(02) Information Search and Retrieval

AC-21(02) Information Search and Retrieval

Control

Implement information search and retrieval services that enforce [Assignement: information-sharing restrictions].

Discussion

Information search and retrieval services identify information system resources relevant to an information need.

Assessment Objective

information search and retrieval services that enforce [Assignement: information-sharing restrictions] are implemented.

Assessment Method

Examine

Access control policy procedures addressing user-based collaboration and information sharing (including restrictions) system design documentation system configuration settings and associated documentation system-generated list of access restrictions regarding information to be shared information search and retrieval records system audit records system security plan other relevant documents or records

Interview

Organizational personnel with access enforcement responsibilities for system search and retrieval services system/network administrators organizational personnel with information security responsibilities system developers

1. Panoramica

Titolo Standard

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti
Fonte Requisito

3. Regolamentazioni correlate

Regolamentazioni
Fonte Regolamentazione

Ticket collegati