Assessment Objective

Determine if:

• a security operations center is established.
• a security operations center is maintained.

Assessment Methods

Examine

• Incident response policy
• contingency planning policy
• procedures addressing incident handling
• procedures addressing the security operations center operations
• mechanisms supporting dynamic response capabilities
• system security plan
• contingency plan
• incident response plan
• other relevant documents or records

Interview

• Personnel with incident handling responsibilities
• personnel with information security responsibilities
• security operations center personnel
• personnel with contingency planning responsibilities

Test

• Mechanisms that support and/or implement the security operations center capability
• mechanisms that support and/or implement the incident handling process

Incidencias vinculadas

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final