Assessment Objective
Determine if:
- SC-22[01] the systems that collectively provide name/address resolution services for an organization are fault-tolerant;
- SC-22[02] the systems that collectively provide name/address resolution services for an organization implement internal role separation;
- SC-22[03] the systems that collectively provide name/address resolution services for an organization implement external role separation.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing architecture and provisioning for name/address resolution services
- access control policy and procedures
- system design documentation
- assessment results from independent testing organizations
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
- organizational personnel with responsibilities for managing DNS
Test
- Mechanisms supporting and/or implementing name/address resolution services for fault tolerance and role separation
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | SC-22 Architecture and Provisioning for Name/Address Resolution Service |