Assessment Objective
Determine if:
- automated mechanisms are employed to maximize the effectiveness of sharing threat intelligence information.
Assessment Methods
Examine
- Information security program plan
- threat awareness program policy
- threat awareness program procedures
- risk assessment results related to threat awareness
- documentation about the cross-organization information-sharing capability
- other relevant documents or records
Interview
- Personnel with information security program planning and plan implementation responsibilities
- personnel responsible for the threat awareness program
- personnel responsible for the cross-organization information-sharing capability
- personnel with information security responsibilities
- external personnel with whom threat awareness information is shared by the organization
Test
- Processes for implementing the threat awareness program
- processes for implementing the cross-organization information-sharing capability
- automated mechanisms supporting and/or implementing the threat awareness program
- automated mechanisms supporting and/or implementing the cross-organization information-sharing capability
Powiązane zgłoszenia
| Typ powiązania | Zgłoszenie |
|---|---|
| blocks | 03.11.12E Automated Means for Sharing Threat Intelligence |