Assessment Objective
Determine if:
- critical system components and functions are identified by performing a criticality analysis for [Assignment: systems, system components, or system services] at [Assignment: decision points].
Assessment Methods
Examine
- Risk assessment policy
- assessment reports
- criticality analysis and/or finalized criticality for each component and/or subcomponent
- audit records and/or event logs
- analysis reports
- system security plan
- other relevant documents or records
Interview
- Personnel with assessment and auditing responsibilities
- personnel with criticality analysis responsibilities
- system/network administrators
- personnel with information security responsibilities
Test
- Processes for assessments and audits
- mechanisms and/or tools supporting and/or implementing assessments and auditing
Saistītie uzdevumi
| Saites veids | Uzdevums |
|---|---|
| blocks | 03.11.10E Criticality Analysis |