Assessment Objective

Determine if:

• AC-16(05)[01] security attributes are displayed in human-readable form on each object that the system transmits to output devices to identify [Assignment: instructions] using [Assignment: naming conventions];
• AC-16(05)[02] privacy attributes are displayed in human-readable form on each object that the system transmits to output devices to identify [Assignment: instructions] using [Assignment: naming conventions].

Assessment Methods

Examine

• Access control policy
• procedures addressing display of security and privacy attributes in human-readable form
• special dissemination, handling, or distribution instructions
• types of human-readable, standard naming conventions
• system design documentation
• system configuration settings and associated documentation
• system audit records
• system security plan
• privacy plan
• other relevant documents or records

Interview

• Organizational personnel with information security and privacy responsibilities
• system developers

Test

• System output devices displaying security and privacy attributes in human-readable form on each object

Pedidos ligados

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final