Assessment Objective
Determine if:
- PL-09 [Assignment: controls and related processes] are centrally managed.
Assessment Methods
Examine
- Security and privacy planning policy
- procedures addressing security and privacy plan development and implementation
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with security and privacy planning and plan implementation responsibilities
- organizational personnel with responsibilities for planning/implementing central management of controls and related processes
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for the central management of controls and related processes
- mechanisms supporting and/or implementing central management of controls and related processes
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | PL-09 [P] Central Management |