SC-11 Trusted Path. Provide a [organization-defined] isolated trusted communications path for communications between the user and the trusted components of the system; and Permit users to invoke the trusted communications path for communications between the
Trusted Path. Provide a [organization-defined] isolated trusted communications path for communications between the user and the trusted components of the system; and Permit users to invoke the trusted communications path.
5
artefacts
1
held by a system
2
at each review
hard
to go live
Document repository
where the evidence lives
teal = a system already holds it · olive = produced at each review
system holds itEvidence a system already holds
- Configuration showing the path cannot be imitated or intercepted by other software on the endpoint · Endpoint management (MDM / EDR)
periodic reviewEvidence produced at each review
- Evidence users can invoke the trusted path themselves, with the invocation mechanism documented · Document repository
- Independent test or assessment results confirming isolation · Document repository
governing documentDocuments that govern the control
- Identification of the trusted components and the security functions the trusted path serves · Document repository
- Design documentation showing the path is logically isolated and distinguishable from other communications · Document repository
First move
Mostly documents and reviews. Pull the 1 system-held artefact from your Endpoint management (MDM / EDR) on a schedule; put the documents under version control with an owner and review date, and log each review as a dated record with a named reviewer.
Common gaps auditors find
- Path claimed from TLS to a login page, which does not isolate the path from software on the user's own machine
- No user invocable mechanism, so the user cannot establish that they are talking to the real system
- Isolation asserted from design intent with no independent testing
Do this for your whole sheet
Paste the rows you run your controls from and get this mapping for every control at once, with the periodic-review ones flagged and a first move per row. No account for the first run.
Build my evidence sheetSC-10 Network disconnect · SC-12 Cryptographic key establishment and management