Assessment Objective
Determine if:
- risk monitoring is an integral part of the continuous monitoring strategy.
- effectiveness monitoring is included in risk monitoring.
- compliance monitoring is included in risk monitoring.
- change monitoring is included in risk monitoring.
Assessment Methods
Examine
- Assessment and monitoring policy
- organizational continuous monitoring strategy
- system-level continuous monitoring strategy
- procedures addressing continuous monitoring of system
- assessment report
- plan of action and milestones
- system monitoring records
- impact analyses
- status reports
- system security plan
- other relevant documents or records
Interview
- Personnel with continuous monitoring responsibilities
- personnel with information security responsibilities
Test
- Mechanisms supporting risk monitoring
Linkitetyt tehtävät
| Linkin tyyppi | Tehtävä |
|---|---|
| blocks | 03.12.03E Risk Monitoring |