Assessment Objective
Determine if:
- SC-27 [Assignment: platform-independent applications] are included within organizational systems.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing platform-independent applications
- system design documentation
- system configuration settings and associated documentation
- list of platform-independent applications
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
- system developer
Test
- Mechanisms supporting and/or implementing platform-independent applications
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | SC-27 Platform-independent Applications |