+IA-03(03) Dynamic Address Allocation
|
IA-03(03) Dynamic Address Allocation
Control
- Where addresses are allocated dynamically, standardize dynamic address allocation lease information and the lease duration assigned to devices in accordance with [Assignement: organization-defined lease information and lease duration] ; and
- Audit lease information when assigned to a device.
Discussion
The Dynamic Host Configuration Protocol (DHCP) is an example of a means by which clients can dynamically receive network address assignments.
Assessment Objective
- dynamic address allocation lease information assigned to devices where addresses are allocated dynamically are standardized in accordance with [Assignement: lease information];
- dynamic address allocation lease duration assigned to devices where addresses are allocated dynamically are standardized in accordance with [Assignement: lease duration];
- lease information is audited when assigned to a device.
Assessment Method
Examine
Identification and authentication policy
system security plan
procedures addressing device identification and authentication
system design documentation
system configuration settings and associated documentation
evidence of lease information and lease duration assigned to devices
device connection reports
system audit records
other relevant documents or records
Interview
Organizational personnel with operational responsibilities for device identification and authentication
organizational personnel with information security responsibilities
system/network administrators
system developers
1. Panoramica
1.1 Riferimenti
1.2 Requisiti identificati
1.3 Regolamentazioni correlate
2. Requisiti identificati
Requisiti
| Fonte |
Requisito |
3. Regolamentazioni correlate
Regolamentazioni
| Fonte |
Regolamentazione |
Ticket collegati
|