Assessment Objective
Determine if:
- CP-03(01) simulated events are incorporated into contingency training to facilitate effective response by personnel in crisis situations.
Assessment Methods
Examine
- Contingency planning policy
- procedures addressing contingency training
- contingency plan
- contingency training curriculum
- contingency training material
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with contingency planning, plan implementation, and training responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for contingency training
- mechanisms for simulating contingency events
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | CP-03(01) Simulated Events |