Assessment Objective
Determine if:
- RA-03(02) all-source intelligence is used to assist in the analysis of risk.
Assessment Methods
Examine
- Risk assessment policy
- security planning policy and procedures
- procedures addressing organizational assessments of risk
- risk assessment
- risk assessment results
- risk assessment reviews
- risk assessment updates
- risk intelligence reports
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with risk assessment responsibilities
- organizational personnel with security responsibilities
Test
- Organizational processes for risk assessment
- mechanisms supporting and/or conducting, documenting, reviewing, disseminating, and updating the risk assessment
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | RA-03(02) Use of All-source Intelligence |