Assessment Objective
Determine if:
- penetration testing is conducted [Assignment: frequency] on [Assignment: systems or system components].
Assessment Methods
Examine
- Assessment and monitoring policy
- procedures addressing penetration testing
- assessment plan
- system security plan
- penetration test rules of engagement
- penetration test report
- assessment report
- assessment evidence
- other relevant documents or records
Interview
- Personnel with assessment responsibilities
- personnel with information security responsibilities
- system/network administrators
Test
- Mechanisms supporting penetration testing
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | 03.12.01E Penetration Testing |