File Impact Level Classification

WS08R2_MCA_00131 (ObjectTemplate)

Configure the file servers in scope to support the data classification of files according to the degree of impact on the organization if they are lost or accessed by unauthorized parties using the File Classification Infrastructure (FCI) feature in Windows Server 2008 R2.

Element properties:

Source Code:

<ObjectTemplate ID="WS08R2_MCA_00131" TypeID="GRCControl!Microsoft.SystemCenter.ConfigurationManager.ControlActivityProjection">

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/ExternalName$">$MPElement[Name='GRC!System.Compliance.SourceNameEnum.MicrosoftCorporation']$</Property>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/ExternalId$">WS08R2_MCA_00131</Property>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/ExternalVersion$"/>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/Type$">$MPElement[Name='GRCControl!System.Compliance.ControlActivity.TypeEnum.Preventive']$</Property>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/Title$">File Impact Level Classification</Property>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/DisplayName$">WS08R2_MCA_00131 File Impact Level Classification</Property>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/Description$">Windows Server 2008 R2 SP1:Configure the file servers in scope to support the data classification of files according to the degree of impact on the organization if they are lost or accessed by unauthorized parties using the File Classification Infrastructure (FCI) feature in Windows Server 2008 R2.</Property>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/ImplementationMethod$">automated</Property>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/AdditionalGuidance$">For more information, see "File Classification Infrastructure" at http://www.microsoft.com/fci



"Working with File Classification" at http://technet.microsoft.com/en-us/library/dd758765(WS.10).aspx</Property>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/TestSummary$">Automated Assertion



This test relies on an IT pro to carry out the following actions:

1. Ensure that all File Servers have been included within this program's scope.

2. Ensure that all servers in scope have FSRM enabled.



This test validates the following using the DCM feature within System Center Configuration Manager:

1. The property for this control activity exists.



This test uses the DCM feature of Microsoft System Center Configuration Manager to validate that the target property exists on the server.



This test produces a value of 'meets expectations' when all scoped files have the defined property.</Property>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/TestId$">ITGRC/CI_3f75cc2b-0558-4caf-bb8e-89b988cc2976</Property>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/TestName$">ITGRC/CI_3f75cc2b-0558-4caf-bb8e-89b988cc2976</Property>

  <Property Path="$Context/Property[Type='GRC!System.Compliance.ControlActivity']/SupportedControlObjectives$">GRC_MCO_00023</Property>

  <Object Path="$Target/Path[Relationship='GRC!System.Compliance.ControlActivityApplicabilityGroup' TypeConstraint='ApplicabilityInstanceGroup_WindowsServer2008R2FCIGroup']">

    <Property Path="$Target/Property[Type='System!System.Entity']/DisplayName$">ApplicabilityInstanceGroup_WindowsServer2008R2FCIGroup</Property>

  </Object>

</ObjectTemplate>