+SC-24 Fail in Known State
|
SC-24 Fail in Known State
Control
Fail to a [Assignement: known system state] for the following failures on the indicated components while preserving [Assignement: system state information] in failure: [Assignement: types of system failures on system components].
Discussion
Failure in a known state addresses security concerns in accordance with the mission and business needs of organizations. Failure in a known state prevents the loss of confidentiality, integrity, or availability of information in the event of failures of organizational systems or system components. Failure in a known safe state helps to prevent systems from failing to a state that may cause injury to individuals or destruction to property. Preserving system state information facilitates system restart and return to the operational mode with less disruption of mission and business processes.
Assessment Objective
[Assignement: types of system failures on system components] fail to a [Assignement: known system state] while preserving [Assignement: system state information] in failure.
Assessment Method
Examine
System and communications protection policy
procedures addressing system failure to known state
system design documentation
system configuration settings and associated documentation
list of failures requiring system to fail in a known state
state information to be preserved in system failure
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
system developer
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|