Assessment Objective
Determine if:
- AC-16(05)[01] security attributes are displayed in human-readable form on each object that the system transmits to output devices to identify [Assignment: instructions] using [Assignment: naming conventions];
- AC-16(05)[02] privacy attributes are displayed in human-readable form on each object that the system transmits to output devices to identify [Assignment: instructions] using [Assignment: naming conventions].
Assessment Methods
Examine
- Access control policy
- procedures addressing display of security and privacy attributes in human-readable form
- special dissemination, handling, or distribution instructions
- types of human-readable, standard naming conventions
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with information security and privacy responsibilities
- system developers
Test
- System output devices displaying security and privacy attributes in human-readable form on each object
Powiązane zgłoszenia
| Typ powiązania | Zgłoszenie |
|---|---|
| blocks | AC-16(05) Attribute Displays on Objects to Be Output |