Assessment Objective
Determine if:
- SA-17(08) [Assignment: critical systems] are designed with coordinated behavior to implement [Assignment: capabilities].
Assessment Methods
Examine
- System and services acquisition policy
- enterprise architecture policy
- procedures addressing developer security and privacy architecture and design
- enterprise architecture
- security architecture
- solicitation documentation
- acquisition documentation
- service level agreements
- acquisition contracts for the system, system component, or system service
- system design documentation
- system configuration settings and associated documentation
- developer documentation describing design orchestration
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with system and service acquisition responsibilities
- organizational personnel with information security and privacy responsibilities
- system developer
- organizational personnel with information security architecture responsibilities
Kwistjonijiet marbuta
| Tip ta’ link | Kwistjoni |
|---|---|
| blocks | SA-17(08) Orchestration |