Assessment Objective
Determine if:
- PS-09[01] security roles and responsibilities are incorporated into organizational position descriptions;
- PS-09[02] privacy roles and responsibilities are incorporated into organizational position descriptions.
Assessment Methods
Examine
- Personnel security policy
- personnel security procedures
- procedures addressing position descriptions
- security and privacy position descriptions
- system security plan
- privacy plan
- privacy program plan
- other relevant documents or records
Interview
- Organizational personnel with personnel security responsibilities
- organizational personnel with information security and privacy responsibilities
- organizational personnel with human capital management responsibilities
Test
- Organizational processes for managing position descriptions
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | PS-09 [H] Position Descriptions |