+CM-06(02) Respond to Unauthorized Changes

CM-06(02) Respond to Unauthorized Changes

Control

Take the following actions in response to unauthorized changes to [Assignement: configuration settings]: [Assignement: actions].

Discussion

Responses to unauthorized changes to configuration settings include alerting designated organizational personnel, restoring established configuration settings, or—in extreme cases—halting affected system processing.

Assessment Objective

[Assignement: actions] are taken in response to unauthorized changes to [Assignement: configuration settings].

Assessment Method

Examine

System security plan privacy plan configuration management policy procedures addressing configuration settings for the system configuration management plan system design documentation system configuration settings and associated documentation alerts/notifications of unauthorized changes to system configuration settings system component inventory documented responses to unauthorized changes to system configuration settings change control records system audit records other relevant documents or records

Interview

Organizational personnel with security configuration management responsibilities organizational personnel with security and privacy responsibilities system/network administrators

1. Ħarsa ġenerali

Titlu Standard

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti
Sors Rekwiżit

3. Regolamenti relatati

Regolamenti
Sors Regolamentazzjoni

Kwistjonijiet marbuta