Assessment Objective
Determine if:
- options for risk mitigation or alternative sources for continued support for unsupported components that cannot be replaced are provided.
- system components are replaced when support for the components is no longer available from the developer, vendor, or manufacturer.
Assessment Methods
Examine
- system and services acquisition policy and procedures
- procedures for the replacement or continued use of unsupported system components
- documented evidence of replacing unsupported system components
- documented approvals (including justification) for the continued use of unsupported system components
- SCRM plan
- system security plan
- other relevant documents or records
Interview
- personnel with system and service acquisition responsibilities
- personnel responsible for component replacement
- personnel with system development life cycle responsibilities
- personnel with information security responsibilities
Test
- processes for replacing unsupported system components
- mechanisms for supporting or implementing the replacement of unsupported system components
Povezane zadeve
| Vrsta povezave | Zadeva |
|---|---|
| blocks | 03.16.02 Unsupported System Components |