Assessment Objective
Determine if:
- SI-14[01] non-persistent [Assignment: system components and services] that are initiated in a known state are implemented;
- SI-14[02] non-persistent [Assignment: system components and services] are terminated [Selection (one or more): upon end of session of use; [Assignment: frequency] ].
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing non-persistence for system components
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel responsible for non-persistence
- organizational personnel with information security responsibilities
- system/network administrators
- system developer
Test
- Automated mechanisms supporting and/or implementing the initiation and termination of non-persistent components
Susietos užduotys
| Saito tipas | Užduotis |
|---|---|
| blocks | SI-14 Non-persistence |