Assessment Objective
Determine if:
- CA-07(05)[01] [Assignment: actions] are employed to validate that policies are established;
- CA-07(05)[02] [Assignment: actions] are employed to validate that implemented controls are operating in a consistent manner.
Assessment Methods
Examine
- Assessment, authorization, and monitoring policy
- organizational continuous monitoring strategy
- system-level continuous monitoring strategy
- procedures addressing continuous monitoring of system security controls
- assessment report
- plan of action and milestones
- system monitoring records
- security impact analyses
- status reports
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with continuous monitoring responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Mechanisms supporting consistency analyses
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | CA-07(05) Consistency Analysis |