Assessment Objective
Determine if:
- AC-17(06) information about remote access mechanisms is protected from unauthorized use and disclosure.
Assessment Methods
Examine
- Access control policy
- procedures addressing remote access to the system
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for implementing or monitoring remote access to the system
- system users with knowledge of information about remote access mechanisms
- organizational personnel with information security responsibilities
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | AC-17(06) Protection of Mechanism Information |