This NIST 800-53 report is posted on the Internet to promote Version 3.0 of LJK/Security . The corresponding vulnerability report for your own system should be guarded more carefully, such as by being reviewed only from local HTML disk files rather than via a web server.

Return to Main Page
Invasive Testing CM_07_1_22

FIPS 199 High Impact (for ICS)

Findings Color Code
Satisfied
Other Than Satisfied - not assessed
Other Than Satisfied - failed

NIST SP 800-53A CM-07 .01(iii)

Question: Does testing the prohibition or restriction of functions, ports, protocols and services in add-on products (particularly networking products) show that errors encountered are logged and fed back to the implementation team for use in continuous improvement ?

Answered by: BOSTON::TYLER

As part of Invasive Testing group: TEST_ADD_PROT

Answer: YES

This NIST 800-53 report is posted on the Internet to promote Version 3.0 of LJK/Security . The corresponding vulnerability report for your own system should be guarded more carefully, such as by being reviewed only from local HTML disk files rather than via a web server.