Assessment Objective
Determine if:
- SC-25[01] minimal functionality for [Assignment: system components] is employed;
- SC-25[02] minimal information storage on [Assignment: system components] is allocated.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing use of thin nodes
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
Test
- Mechanisms supporting and/or implementing thin nodes
Kwistjonijiet marbuta
| Tip ta’ link | Kwistjoni |
|---|---|
| blocks | SC-25 Thin Nodes |