Assessment Objective
Determine if:
- SC-05(03)(a) [Assignment: monitoring tools] are employed to detect indicators of denial-of-service attacks against or launched from the system;
- SC-05(03)(b) [Assignment: system resources] are monitored to determine if sufficient resources exist to prevent effective denial-of-service attacks.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing denial-of-service protection
- system design documentation
- system monitoring tools and techniques documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
- organizational personnel with detection and monitoring responsibilities
Test
- Mechanisms/tools implementing system monitoring for denial-of-service attacks
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | SC-05(03) Detection and Monitoring |