Assessment Objective
Determine if:
- CA-08 penetration testing is conducted [Assignment: frequency] on [Assignment: system(s) or system components].
Assessment Methods
Examine
- Assessment, authorization, and monitoring policy
- procedures addressing penetration testing
- assessment plan
- penetration test report
- assessment report
- assessment evidence
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with control assessment responsibilities
- organizational personnel with information security and privacy responsibilities
- system/network administrators
Test
- Mechanisms supporting penetration testing
Kwistjonijiet marbuta
| Tip ta’ link | Kwistjoni |
|---|---|
| blocks | CA-08 [H] Penetration Testing |