+AC-21(02) Information Search and Retrieval

AC-21(02) Information Search and Retrieval

Control

Implement information search and retrieval services that enforce [Assignement: information-sharing restrictions].

Discussion

Information search and retrieval services identify information system resources relevant to an information need.

Assessment Objective

information search and retrieval services that enforce [Assignement: information-sharing restrictions] are implemented.

Assessment Method

Examine

Access control policy procedures addressing user-based collaboration and information sharing (including restrictions) system design documentation system configuration settings and associated documentation system-generated list of access restrictions regarding information to be shared information search and retrieval records system audit records system security plan other relevant documents or records

Interview

Organizational personnel with access enforcement responsibilities for system search and retrieval services system/network administrators organizational personnel with information security responsibilities system developers

1. Ħarsa ġenerali

Titlu Standard

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti
Sors Rekwiżit

3. Regolamenti relatati

Regolamenti
Sors Regolamentazzjoni

Kwistjonijiet marbuta