Assessment Objective
Determine if:
- CA-07(01) independent assessors or assessment teams are employed to monitor the controls in the system on an ongoing basis.
Assessment Methods
Examine
- Assessment, authorization, and monitoring policy
- organizational continuous monitoring strategy
- system-level continuous monitoring strategy
- procedures addressing continuous monitoring of system controls
- control assessment report
- plan of action and milestones
- system monitoring records
- impact analyses
- status reports
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with continuous monitoring responsibilities
- organizational personnel with information security and privacy responsibilities
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | CA-07(01) [H] Independent Assessment |