Assessment Objective
Determine if:
- the security architecture for the system is designed using a defense-in-depth approach.
- [Assignment: security requirements] are allocated to [Assignment: architectural layers and locations].
- the security requirements allocated to the architectural layers and locations are coordinated and mutually reinforcing.
Assessment Methods
Examine
- Security planning policy
- procedures addressing information security architecture development
- enterprise architecture documentation
- information security architecture documentation
- system security plan
- security CONOPS for the system
- other relevant documents or records
Interview
- Personnel with information security responsibilities
- personnel with information security architecture development responsibilities
- personnel with security planning and plan implementation responsibilities
Test
- Processes for designing the information security architecture
- mechanisms supporting and/or implementing the design of the information security architecture
Saistītie uzdevumi
| Saites veids | Uzdevums |
|---|---|
| blocks | 03.15.02E Defense In Depth |