usnistgov / FederalProfile-8259A

4 stars 8 forks source link

Clean up bullet about protecting audit information #73

Closed jmarron-acd closed 4 years ago

jmarron-acd commented 4 years ago

The last bullet in Audit Support reads: Ability to protect the audit information it provides to the information system according to organizational policy (e.g., the device may need to support encryption and data signing of its auditing files if necessary, as well as other access control protections).

1) Suggest rewording to read "Ability of the IoT device to protect its audit information according to organizational policy" 2) Suggest making the parenthetical expression into a sub-bullet "the ability of the IoT device to support encryption and data signing of its auditing files, if necessary."

jmarron-acd commented 4 years ago

Kevin also suggested "The device may need to send its audit files to another device securely"

Possibility to create this as an additional sub-bullet.