Assessment Objective
Determine if:
- data or capabilities are embedded in [Assignment: systems or system components] to determine if CUI has been exfiltrated or improperly removed from the organization.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing software and information integrity
- system design documentation
- system configuration settings and associated documentation
- policy and procedures addressing the systems security engineering technique of deception
- system security plan
- other relevant documents or records
Interview
- Personnel responsible for detecting tainted data
- personnel with systems security engineering responsibilities
- personnel with information security responsibilities
Test
- Automated mechanisms for post-breach detection
- decoys, traps, lures, and methods for deceiving adversaries
- detection and notification mechanisms
Povezane zadeve
| Vrsta povezave | Zadeva |
|---|---|
| blocks | 03.14.16E Tainting |