CCI-002626

When testing malicious code protection mechanisms, verify the associated incident reporting of the code occurs.

Implementation Guidance

The organization being inspected/assessed verifies the incident reporting of the test case occurs when testing malicious code protection mechanisms. The organization must maintain an audit trail of test cases and success or failure.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of test cases and success or failure to ensure the organization being inspected/assessed verifies the incident reporting of the test case occurs when testing malicious code protection mechanisms.

Compelling Evidence

1.) Audit trail of test cases and success or failure.

The controls below (if any) were marked by NIST as being related to CCI-002626.