Assessment Objective
Determine if:
- CA-06(01)[01] a joint authorization process is employed for the system;
- CA-06(01)[02] the joint authorization process employed for the system includes multiple authorizing officials from the same organization conducting the authorization.
Assessment Methods
Examine
- Assessment, authorization, and monitoring policy
- procedures addressing authorization
- system security plan
- privacy plan
- assessment report
- plan of action and milestones
- authorization statement
- other relevant documents or records
Interview
- Organizational personnel with authorization responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Mechanisms that facilitate authorizations and updates
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | CA-06(01) Joint Authorization — Intra-organization |