Assessment Objective
Determine if:
- CP-13 [Assignment: alternative or supplemental security mechanisms] are employed for satisfying [Assignment: security functions] when the primary means of implementing the security function is unavailable or compromised.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing alternate security mechanisms
- contingency plan
- continuity of operations plan
- system design documentation
- system configuration settings and associated documentation
- contingency plan test records
- contingency plan test results
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with system operation responsibilities
- organizational personnel with information security responsibilities
Test
- system capability implementing alternative security mechanisms
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | CP-13 Alternative Security Mechanisms |