+AU-10(02) Validate Binding of Information Producer Identity
|
AU-10(02) Validate Binding of Information Producer Identity
Control
- Validate the binding of the information producer identity to the information at [Assignement: frequency] ; and
- Perform [Assignement: actions] in the event of a validation error.
Discussion
Validating the binding of the information producer identity to the information prevents the modification of information between production and review. The validation of bindings can be achieved by, for example, using cryptographic checksums. Organizations determine if validations are in response to user requests or generated automatically.
Assessment Objective
- the binding of the information producer identity to the information is validated at [Assignement: frequency];
- [Assignement: actions] in the event of a validation error are performed.
Assessment Method
Examine
Audit and accountability policy
system security plan
privacy plan
procedures addressing non-repudiation
system design documentation
system configuration settings and associated documentation
validation records
system audit records
other relevant documents or records
Interview
Organizational personnel with information security and privacy responsibilities
system/network administrators
system developers
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|