Assessment Objective
Determine if:
- PM-07(01) [Assignment: non-essential functions or services] are offloaded to other systems, system components, or an external provider.
Assessment Methods
Examine
- Information security program plan
- privacy program plan
- enterprise architecture documentation
- procedures addressing enterprise architecture development
- procedures for identifying and offloading functions or services
- results of risk assessments of enterprise architecture
- other relevant documents or records
Interview
- Organizational personnel with information security and privacy program planning and plan implementation responsibilities
- organizational personnel responsible for developing enterprise architecture
- organizational personnel responsible for risk assessments of enterprise architecture
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for enterprise architecture development
- mechanisms supporting the enterprise architecture and its development
- mechanisms for offloading functions and services
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | PM-07(01) Offloading |