Assessment Objective

Determine if:

• each type of wireless access to the system is defined.
• usage restrictions are established for each type of wireless access to the system.
• configuration requirements are established for each type of wireless access to the system.
• connection requirements are established for each type of wireless access to the system.
• each type of wireless access to the system is authorized prior to establishing such connections.
• wireless networking capabilities not intended for use are disabled prior to issuance and deployment.
• wireless access to the system is protected using authentication.
• wireless access to the system is protected using encryption.

Assessment Methods

Examine

• access control policy and procedures
• procedures for wireless system access
• wireless system access configuration and connection requirements
• configuration management plan
• system configuration settings
• wireless access authorizations
• system audit records
• system design documentation
• system security plan
• other relevant documents or records

Interview

• personnel with responsibilities for managing wireless access connections
• personnel with information security responsibilities
• system developers
• system administrators

Test

• wireless access management capability for the system
• mechanisms for implementing wireless access protections to the system
• mechanisms for managing the disabling of wireless networking capabilities

Susietos užduotys

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final