Assessment Objective
Determine if:
- SI-04(02) automated tools and mechanisms are employed to support a near real-time analysis of events.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing system monitoring tools and techniques
- system design documentation
- system monitoring tools and techniques documentation
- system configuration settings and associated documentation
- system audit records
- system security plan
- privacy plan
- privacy program plan
- privacy impact assessment
- privacy risk management documentation
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security and privacy responsibilities
- organizational personnel installing, configuring, and/or maintaining the system
- organizational personnel responsible for monitoring the system
- organizational personnel responsible for incident response/management
Test
- Organizational processes for the near real-time analysis of events
- organizational processes for system monitoring
- mechanisms supporting and/or implementing system monitoring
- mechanisms/tools supporting and/or implementing an analysis of events
Свързани задачи
| Тип връзка | Задача |
|---|---|
| blocks | SI-04(02) Automated Tools and Mechanisms for Real-time Analysis |