Assessment Objective
Determine if:
- SI-14(02)(a) [Selection: refresh [Assignment: information] [Assignment: frequency] ; generate [Assignment: information] on demand] is performed;
- SI-14(02)(b) information is deleted when no longer needed.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing non-persistence for system components
- system design documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel responsible for ensuring that information is and remains non-persistent
- organizational personnel with information security responsibilities
Test
- Organizational processes for ensuring that information is and remains non-persistent
- automated mechanisms supporting and/or implementing component and service refreshes
Powiązane zgłoszenia
| Typ powiązania | Zgłoszenie |
|---|---|
| blocks | SI-14(02) Non-persistent Information |