Assessment Objective
Determine if:
- access to the system is prevented by [Assignment: SELECTED PARAMETER VALUES].
- information previously visible on the display is concealed via device lock with a publicly viewable image.
- the device lock is retained until the user reestablishes access using established identification and authentication procedures.
Assessment Methods
Examine
- access control policy and procedures
- procedures for session lock and identification and authentication
- system design documentation
- system configuration settings
- display screen with session lock activated
- system security plan
- other relevant documents or records
Interview
- personnel with information security responsibilities
- system developers
- system administrators
Test
- mechanisms for implementing the access control policy for session lock
- session lock mechanisms
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | 03.01.10 Device Lock |