Assessment Objective
Determine if:
- SI-07(07) the detection of [Assignment: changes] are incorporated into the organizational incident response capability.
Assessment Methods
Examine
- System and information integrity policy
- system and information integrity procedures
- procedures addressing software, firmware, and information integrity
- procedures addressing incident response
- system design documentation
- system configuration settings and associated documentation
- incident response records
- audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel responsible for software, firmware, and/or information integrity
- organizational personnel with information security responsibilities
- organizational personnel with incident response responsibilities
Test
- Organizational processes for incorporating the detection of unauthorized security-relevant changes into the incident response capability
- software, firmware, and information integrity verification tools
- mechanisms supporting and/or implementing the incorporation of detection of unauthorized security-relevant changes into the incident response capability
Kapcsolt feladatok
| Kapcsolattípus | Feladat |
|---|---|
| blocks | SI-07(07) [M] Integration of Detection and Response |