Navigate

CCI-002625

CCI-002625 Definition

When testing malicious code protection mechanisms, verify the detection of the code.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed verifies the detection of the test case occurs when testing malicious code protection mechanisms. The organization must maintain an audit trail of test cases and successful or failed detection.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of test cases and successful or failed detection to ensure the organization being inspected/assessed verifies the detection of the test case occurs when testing malicious code protection mechanisms.

Compelling Evidence

1.) Audit trail of test cases and successful or failed detection.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002625.

Control	Description
SI-3(6)	The organization: (a): Tests malicious code protection mechanisms [organization-defined frequency] by introducing a known benign, non-spreading test case into the information system; and (b): Verifies that both detection of the test case and associated incident reporting occur.