Assessment Objective
Determine if:
- IA-05(08) [Assignment: security controls] are implemented to manage the risk of compromise due to individuals having accounts on multiple systems.
Assessment Methods
Examine
- Identification and authentication policy
- procedures addressing authenticator management
- system security plan
- list of individuals having accounts on multiple systems
- list of security safeguards intended to manage risk of compromise due to individuals having accounts on multiple systems
- other relevant documents or records
Interview
- Organizational personnel with authenticator management responsibilities
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Mechanisms supporting and/or implementing safeguards for authenticator management
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | IA-05(08) Multiple System Accounts |