Assessment Objective
Determine if:
- CA-08(01) an independent penetration testing agent or team is employed to perform penetration testing on the system or system components.
Assessment Methods
Examine
- Assessment, authorization, and monitoring policy
- procedures addressing penetration testing
- assessment plan
- penetration test report
- assessment report
- security assessment evidence
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with assessment responsibilities
- organizational personnel with information security and privacy responsibilities
Incidencias vinculadas
| Tipo de vínculo | Incidencia |
|---|---|
| blocks | CA-08(01) Independent Penetration Testing Agent or Team |