Assessment Objective
Determine if:
- CA-02(01) independent assessors or assessment teams are employed to conduct control assessments.
Assessment Methods
Examine
- Assessment, authorization, and monitoring policy
- procedures addressing control assessments
- previous control assessment plan
- previous control assessment report
- plan of action and milestones
- existing authorization statement
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with security assessment responsibilities
- organizational personnel with information security and privacy responsibilities
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | CA-02(01) Independent Assessors |