Assessment Objective
Determine if:
- PM-13[01] a security workforce development and improvement program is established;
- PM-13[02] a privacy workforce development and improvement program is established.
Assessment Methods
Examine
- Information security program plan
- privacy program plan
- information security and privacy workforce development and improvement program documentation
- procedures for the information security and privacy workforce development and improvement program
- information security and privacy role-based training program documentation
- other relevant documents or records
Interview
- Organizational personnel with information security and privacy program planning and plan implementation responsibilities
- organizational personnel responsible for the information security and privacy workforce development and improvement program
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for implementing the information security and privacy workforce development and improvement program
- mechanisms supporting and/or implementing the information security and privacy workforce development and improvement program
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | PM-13 [P] Security and Privacy Workforce |