SC-31(1)

Requirement

Test a subset of the identified covert channels to determine the channels that are exploitable.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; procedures addressing covert channel analysis; system design documentation; system configuration settings and associated documentation; list of covert channels; covert channel analysis documentation; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; organizational personnel with covert channel analysis responsibilities].

Test

[SELECT FROM: Organizational process for testing covert channels; mechanisms supporting and/or implementing the testing of covert channel analysis].

ID	Assessment Objectives
SC-31(01)	a subset of the identified covert channels is tested to determine the channels that are exploitable.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!