Assessment Objective
Determine if:
- RA-05(06) the results of multiple vulnerability scans are compared using [Assignment: automated mechanisms].
Assessment Methods
Examine
- Risk assessment policy
- procedures addressing vulnerability scanning
- system design documentation
- vulnerability scanning tools and techniques documentation
- vulnerability scanning results
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with vulnerability scanning responsibilities
- organizational personnel with vulnerability scan analysis responsibilities
- organizational personnel with security responsibilities
Test
- Organizational processes for vulnerability scanning
- automated mechanisms/tools supporting and/or implementing vulnerability scanning
- automated mechanisms supporting and/or implementing trend analysis of vulnerability scan results
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | RA-05(06) Automated Trend Analyses |