Assessment Objective
Determine if:
- AC-19(05) [Selection: full-device encryption; container-based encryption] is employed to protect the confidentiality and integrity of information on [Assignment: mobile devices].
Assessment Methods
Examine
- Access control policy
- procedures addressing access control for mobile devices
- system design documentation
- system configuration settings and associated documentation
- encryption mechanisms and associated configuration documentation
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with access control responsibilities for mobile devices
- system/network administrators
- organizational personnel with information security responsibilities
Test
- Encryption mechanisms protecting confidentiality and integrity of information on mobile devices
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | AC-19(05) Full Device or Container-based Encryption |