Assessment Objective
Determine if:
- a threat awareness program that includes a cross-organization information-sharing capability for threat intelligence is implemented.
Assessment Methods
Examine
- Information security program plan
- threat awareness program policy
- threat awareness program procedures
- risk assessment results relevant to threat awareness
- documentation about the cross-organization information-sharing capability
- other relevant documents or records
Interview
- Personnel with information security program planning and plan implementation responsibilities
- personnel responsible for the threat awareness program
- personnel responsible for the cross-organization information-sharing capability
- personnel with information security responsibilities
- external personnel with whom threat awareness information is shared by the organization
Test
- Processes for implementing the threat awareness program
- processes for implementing the cross-organization information-sharing capability
- mechanisms supporting and/or implementing the threat awareness program
- mechanisms supporting and/or implementing the cross-organization information-sharing capability
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | 03.11.01E Threat Awareness Program |