Assessment Objective
Determine if:
- SI-15 information output from [Assignment: software programs and/or applications] is validated to ensure that the information is consistent with the expected content.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing information output filtering
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel responsible for validating information output
- organizational personnel with information security responsibilities
- system/network administrators
- system developer
Test
- Organizational processes for validating information output
- automated mechanisms supporting and/or implementing information output validation
Kwistjonijiet marbuta
| Tip ta’ link | Kwistjoni |
|---|---|
| blocks | SI-15 Information Output Filtering |