Assessment Objective
Determine if:
- PE-23a. the location or site of the facility where the system resides is planned considering physical and environmental hazards;
- PE-23b. for existing facilities, physical and environmental hazards are considered in the organizational risk management strategy.
Assessment Methods
Examine
- Physical and environmental protection policy
- physical site planning documents
- organizational assessment of risk
- contingency plan
- risk mitigation strategy documentation
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with site selection responsibilities for the facility housing the system
- organizational personnel with risk mitigation responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for site planning
Lingitud teemad
| Lingi tüüp | Teema |
|---|---|
| blocks | PE-23 Facility Location |