+AC-16(07) Consistent Attribute Interpretation
|
AC-16(07) Consistent Attribute Interpretation
Control
Provide a consistent interpretation of security and privacy attributes transmitted between distributed system components.
Discussion
To enforce security and privacy policies across multiple system components in distributed systems, organizations provide a consistent interpretation of security and privacy attributes employed in access enforcement and flow enforcement decisions. Organizations can establish agreements and processes to help ensure that distributed system components implement attributes with consistent interpretations in automated access enforcement and flow enforcement actions.
Assessment Objective
- a consistent interpretation of security attributes transmitted between distributed system components is provided;
- a consistent interpretation of privacy attributes transmitted between distributed system components is provided.
Assessment Method
Examine
Access control policies and procedures
procedures addressing consistent interpretation of security and privacy attributes transmitted between distributed system components
procedures addressing access enforcement
procedures addressing information flow enforcement
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
privacy access control policy
other relevant documents or records
Interview
Organizational personnel with responsibilities for providing consistent interpretation of security and privacy attributes used in access enforcement and information flow enforcement actions
organizational personnel with information security and privacy responsibilities
system developers
1. Apžvalga
1.1 Nuorodos
1.2 Nustatyti reikalavimai
1.3 Susiję teisės aktai
2. Nustatyti reikalavimai
Reikalavimai
| Šaltinis |
Reikalavimas |
3. Susiję teisės aktai
Teisės aktai
| Šaltinis |
Reguliavimas |
Susietos užduotys
|