Assessment Objective
Determine if:
- [Assignment: systems security engineering principles] are applied to the development or modification of the system and system components.
Assessment Methods
Examine
- system and services acquisition policy
- system and services acquisition procedures
- procedures addressing security engineering principles used in the development and modification of the system
- system design documentation
- security requirements and specifications for the system
- system security plan
- other relevant documents or records
Interview
- personnel with acquisition/contracting responsibilities
- personnel with information security responsibilities
- personnel with system development and modification responsibilities
- system developers
Test
- processes for applying security engineering principles in system development and modification
- mechanisms supporting the application of security engineering principles in system development and modification
Incidencias vinculadas
| Tipo de vínculo | Incidencia |
|---|---|
| blocks | 03.16.01 Security Engineering Principles |