Assessment Objective
Determine if:
- independent assessors or assessment teams are used to conduct security requirement assessments.
Assessment Methods
Examine
- Assessment and monitoring policy
- procedures addressing assessments
- previous assessment plan
- previous assessment report
- plan of action and milestones
- system security plan
- other relevant documents or records
Interview
- Personnel with assessment responsibilities
- personnel with information security responsibilities
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | 03.12.02E Independent Assessors |