Assessment Objective

Determine if:

• CA-02(03) the results of control assessments performed by [Assignment: external organization(s)] on [Assignment: system] are leveraged when the assessment meets [Assignment: requirements].

Assessment Methods

Examine

• Assessment, authorization, and monitoring policy
• procedures addressing control assessments
• control assessment requirements
• control assessment plan
• control assessment report
• control assessment evidence
• plan of action and milestones
• system security plan
• privacy plan
• other relevant documents or records

Interview

• Organizational personnel with control assessment responsibilities
• organizational personnel with information security and privacy responsibilities
• personnel performing control assessments for the specified external organization

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final