Assessment Objective
Determine if:
- AC-24 [Selection (one or more): establish procedures; implement mechanisms] are taken to ensure that [Assignment: access control decisions] are applied to each access request prior to access enforcement.
Assessment Methods
Examine
- Access control policy
- procedures addressing access control decisions
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for establishing procedures regarding access control decisions to the system
- organizational personnel with information security responsibilities
Test
- Mechanisms applying established access control decisions and procedures
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | AC-24 Access Control Decisions |