Assessment Objective

Determine if:

• CA-05(01) [Assignment: automated mechanisms] are used to ensure the accuracy, currency, and availability of the plan of action and milestones for the system.

Assessment Methods

Examine

• Assessment, authorization, and monitoring policy
• procedures addressing plan of action and milestones
• system design documentation
• system configuration settings and associated documentation
• system audit records
• plan of action and milestones
• system security plan
• privacy plan
• other relevant documents or records

Interview

• Organizational personnel with plan of action and milestones development and implementation responsibilities
• organizational personnel with information security and privacy responsibilities

Test

• Automated mechanisms for developing, implementing, and maintaining a plan of action and milestones

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final