Assessment Objective
Determine if:
- incidents are tracked using [Assignment: automated mechanisms].
- incident information is collected using [Assignment: automated mechanisms].
- incident information is analyzed using [Assignment: automated mechanisms].
Assessment Methods
Examine
- Incident response policy
- procedures addressing incident monitoring
- incident response records and documentation
- system security plan
- incident response plan
- other relevant documents or records
Interview
- Personnel with incident monitoring responsibilities
- personnel with information security responsibilities
Test
- Incident monitoring capability for the organization
- automated mechanisms supporting and/or implementing the tracking and documenting of system security incidents
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | 03.06.04E Automated Tracking, Data Collection, and Analysis for Incident Monitoring |