Assessment Objective
Determine if:
- unauthorized information transfer via shared system resources is prevented.
- unintended information transfer via shared system resources is prevented.
Assessment Methods
Examine
- system and communications protection policy and procedures
- procedures for information protection in shared system resources
- system configuration settings
- system audit records
- system design documentation
- system security plan
- other relevant documents or records
Interview
- personnel with information security responsibilities
- system developers
- system administrators
Test
- mechanisms for preventing the unauthorized and unintended transfer of information via shared system resources
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | 03.13.04 Information in Shared System Resources |