Assessment Objective
Determine if:
- CA-02(02) [Assignment: specialized assessment frequency] [Selection: announced; unannounced] [Selection (one or more): in-depth monitoring; security instrumentation; automated security test cases; vulnerability scanning; malicious user testing; insider threat assessment; performance and load testing; data leakage or data loss assessment; [Assignment: other forms of assessment] ] are included as part of control assessments.
Assessment Methods
Examine
- Assessment, authorization, and monitoring policy
- procedures addressing control assessments
- control assessment plan
- control assessment report
- control assessment evidence
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with control assessment responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Mechanisms supporting control assessment
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | CA-02(02) [H] Specialized Assessments |