Assessment Objective

Determine if:

• CA-07(01) independent assessors or assessment teams are employed to monitor the controls in the system on an ongoing basis.

Assessment Methods

Examine

• Assessment, authorization, and monitoring policy
• organizational continuous monitoring strategy
• system-level continuous monitoring strategy
• procedures addressing continuous monitoring of system controls
• control assessment report
• plan of action and milestones
• system monitoring records
• impact analyses
• status reports
• system security plan
• privacy plan
• other relevant documents or records

Interview

• Organizational personnel with continuous monitoring responsibilities
• organizational personnel with information security and privacy responsibilities

Gekoppelde issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final