Assessment Objective
Determine if:
- SI-08a.
- SI-08a.[01] spam protection mechanisms are employed at system entry points to detect unsolicited messages;
- SI-08a.[02] spam protection mechanisms are employed at system exit points to detect unsolicited messages;
- SI-08a.[03] spam protection mechanisms are employed at system entry points to act on unsolicited messages;
- SI-08a.[04] spam protection mechanisms are employed at system exit points to act on unsolicited messages;
- SI-08b. spam protection mechanisms are updated when new releases are available in accordance with organizational configuration management policies and procedures.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- configuration management policies and procedures (CM-01)
- procedures addressing spam protection
- spam protection mechanisms
- records of spam protection updates
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel responsible for spam protection
- organizational personnel with information security responsibilities
- system/network administrators
- system developer
Test
- Organizational processes for implementing spam protection
- mechanisms supporting and/or implementing spam protection
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | SI-08 [M] Spam Protection |