+AT-02(04) Suspicious Communications and Anomalous System Behavior

AT-02(04) Suspicious Communications and Anomalous System Behavior

Control

Provide literacy training on recognizing suspicious communications and anomalous behavior in organizational systems using [Assignement: indicators of malicious code].

Discussion

A well-trained workforce provides another organizational control that can be employed as part of a defense-in-depth strategy to protect against malicious code coming into organizations via email or the web applications. Personnel are trained to look for indications of potentially suspicious email (e.g., receiving an unexpected email, receiving an email containing strange or poor grammar, or receiving an email from an unfamiliar sender that appears to be from a known sponsor or contractor). Personnel are also trained on how to respond to suspicious email or web communications. For this process to work effectively, personnel are trained and made aware of what constitutes suspicious communications. Training personnel on how to recognize anomalous behaviors in systems can provide organizations with early warning for the presence of malicious code. Recognition of anomalous behavior by organizational personnel can supplement malicious code detection and protection tools and systems employed by organizations.

Assessment Objective

literacy training on recognizing suspicious communications and anomalous behavior in organizational systems using [Assignement: indicators of malicious code] is provided.

Assessment Method

Examine

System security plan privacy plan literacy training and awareness policy procedures addressing literacy training and awareness implementation literacy training and awareness curriculum literacy training and awareness materials other relevant documents or records

Interview

Organizational personnel who receive literacy training and awareness organizational personnel with responsibilities for basic literacy training and awareness organizational personnel with information security and privacy responsibilities

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
is blocked by AT-02(04) Suspicious Communications and Anomalous System Behavior – Assessment Procedure
is blocked by Suspicious Communications & Anomalous System Behavior