Assessment Objective
Determine if:
- SI-07(17) [Assignment: controls] are implemented for application self-protection at runtime.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing software and information integrity
- system design documentation
- system configuration settings and associated documentation
- list of known vulnerabilities addressed by runtime instrumentation
- system security plan
- other relevant documents or records
Interview
- Organizational personnel responsible for software, firmware, and/or information integrity
- organizational personnel with information security responsibilities
- system/network administrators
- system developer
Test
- Software, firmware, and information integrity verification tools
- mechanisms supporting and/or implementing runtime application self-protection
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | SI-07(17) Runtime Application Self-protection |