Assessment Objective
Determine if:
- the security requirements for the system and its environment of operation are assessed [Assignment: frequency] to determine if the requirements have been satisfied.
Assessment Methods
Examine
- security assessment and monitoring policy and procedures
- procedures for security assessment planning
- security assessment plan
- security assessment report
- system security plan
- other relevant documents or records
Interview
- personnel with security assessment responsibilities
- personnel with information security responsibilities
Test
- mechanisms for supporting security assessments, processes for security assessment plan development, or security assessment reporting
Incidencias vinculadas
| Tipo de vínculo | Incidencia |
|---|---|
| blocks | 03.12.01 Security Assessment |