+SC-28(02) Offline Storage
|
SC-28(02) Offline Storage
Control
Remove the following information from online storage and store offline in a secure location: [Assignement: information].
Discussion
Removing organizational information from online storage to offline storage eliminates the possibility of individuals gaining unauthorized access to the information through a network. Therefore, organizations may choose to move information to offline storage in lieu of protecting such information in online storage.
Assessment Objective
- [Assignement: information] is removed from online storage;
- [Assignement: information] is stored offline in a secure location.
Assessment Method
Examine
System and communications protection policy
procedures addressing the protection of information at rest
system design documentation
system configuration settings and associated documentation
cryptographic mechanisms and associated configuration documentation
offline storage locations for information at rest
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|