Assessment Objective

Determine if:

• PM-02[01] a senior agency information security officer is appointed;
• PM-02[02] the senior agency information security officer is provided with the mission and resources to coordinate an organization-wide information security program;
• PM-02[03] the senior agency information security officer is provided with the mission and resources to develop an organization-wide information security program;
• PM-02[04] the senior agency information security officer is provided with the mission and resources to implement an organization-wide information security program;
• PM-02[05] the senior agency information security officer is provided with the mission and resources to maintain an organization-wide information security program.

Assessment Methods

Examine

• Information security program plan
• procedures addressing program plan development and implementation
• procedures addressing program plan reviews and updates
• procedures addressing coordination of the program plan with relevant entities
• other relevant documents or records

Interview

• Organizational personnel with information security program planning and plan implementation responsibilities
• senior information security officer
• organizational personnel with information security responsibilities

Incidencias vinculadas

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final