Assessment Objective
Determine if:
- AC-07(02) information is purged or wiped from [Assignment: mobile devices] based on [Assignment: purging or wiping requirements and techniques] after [Assignment: number] consecutive, unsuccessful device logon attempts.
Assessment Methods
Examine
- Access control policy
- procedures addressing unsuccessful logon attempts on mobile devices
- system design documentation
- system configuration settings and associated documentation
- list of mobile devices to be purged/wiped after organization-defined consecutive, unsuccessful device logon attempts
- list of purging/wiping requirements or techniques for mobile devices
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
Test
- Mechanisms implementing access control policy for unsuccessful device logon attempts
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | AC-07(02) Purge or Wipe Mobile Device |