Assessment Objective
Determine if:
- CP-09(08) cryptographic mechanisms are implemented to prevent unauthorized disclosure and modification of [Assignment: backup information].
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing system backup
- contingency plan
- system design documentation
- system configuration settings and associated documentation
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system backup responsibilities
- organizational personnel with information security responsibilities
Test
- Mechanisms supporting and/or implementing cryptographic protection of backup information
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | CP-09(08) [H] Cryptographic Protection |