Assessment Objective
Determine if:
- CA-06(02)[01] a joint authorization process is employed for the system;
- CA-06(02)[02] the joint authorization process employed for the system includes multiple authorizing officials with at least one authorizing official from an organization external to the organization conducting the authorization.
Assessment Methods
Examine
- Assessment, authorization, and monitoring policy
- procedures addressing authorization
- system security plan
- privacy plan
- assessment report
- plan of action and milestones
- authorization statement
- other relevant documents or records
Interview
- Organizational personnel with authorization responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Mechanisms that facilitate authorizations and updates
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | CA-06(02) Joint Authorization — Inter-organization |