IAC-27
Reference Monitor
Description
Mechanisms exist to implement a reference monitor that is tamperproof, always-invoked, small enough to be subject to analysis / testing and the completeness of which can be assured.
Control Question
Does the organization implement a reference monitor that is tamperproof, always-invoked, small enough to be subject to analysis / testing and the completeness of which can be assured?
Control Metadata
Domain:
Identification & Authentication
Validation Cadence:
Annual