Assessment Objective
Determine if:
- [Assignment: devices or types of devices] are authenticated before establishing a system connection.
- [Assignment: devices or types of devices] are uniquely identified before establishing a system connection.
Assessment Methods
Examine
- identification and authentication policy and procedures
- procedures for device identification and authentication
- system design documentation
- list of devices requiring unique identification and authentication
- device connection reports
- system configuration settings
- system security plan
- other relevant documents or records
Interview
- personnel with responsibilities for device identification and authentication
- personnel with information security responsibilities
- system developers
- system administrators
Test
- mechanisms for supporting or implementing device identification and authentication capabilities
Susietos užduotys
| Saito tipas | Užduotis |
|---|---|
| blocks | 03.05.02 Device Identification and Authentication |