Assessment Objective
Determine if:
- SI-06(03)[01] the results of security function verification are reported to [Assignment: personnel or roles];
- SI-06(03)[02] the results of privacy function verification are reported to [Assignment: personnel or roles].
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing security and privacy function verification
- system design documentation
- system configuration settings and associated documentation
- reports of security and privacy function verification results
- system audit records
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with security and privacy function verification responsibilities
- organizational personnel who are recipients of security and privacy function verification reports
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for reporting security and privacy function verification results
- mechanisms supporting and/or implementing the reporting of security and privacy function verification results
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | SI-06(03) Report Verification Results |