Assessment Objective
Determine if:
- the current cyber threat environment is determined on an ongoing basis using [Assignment: means].
Assessment Methods
Examine
- Risk assessment policy
- security planning policy and procedures
- procedures addressing organizational assessments of risk
- risk assessment
- risk assessment results
- risk assessment reviews
- risk assessment updates
- risk reports
- system security plan
- other relevant documents or records
Interview
- Personnel with risk assessment responsibilities
- personnel with information security responsibilities
Test
- Processes for risk assessment
- mechanisms supporting and/or conducting, documenting, reviewing, disseminating, and updating the risk assessment
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | 03.11.08E Dynamic Threat Awareness |