Assessment Objective
Determine if:
- AC-16(07)[01] a consistent interpretation of security attributes transmitted between distributed system components is provided;
- AC-16(07)[02] a consistent interpretation of privacy attributes transmitted between distributed system components is provided.
Assessment Methods
Examine
- Access control policies and procedures
- procedures addressing consistent interpretation of security and privacy attributes transmitted between distributed system components
- procedures addressing access enforcement
- procedures addressing information flow enforcement
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- privacy access control policy
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for providing consistent interpretation of security and privacy attributes used in access enforcement and information flow enforcement actions
- organizational personnel with information security and privacy responsibilities
- system developers
Test
- Mechanisms implementing access enforcement and information flow enforcement functions
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | AC-16(07) Consistent Attribute Interpretation |