Assessment Objective
Determine if:
- a security operations center is established.
- a security operations center is maintained.
Assessment Methods
Examine
- Incident response policy
- contingency planning policy
- procedures addressing incident handling
- procedures addressing the security operations center operations
- mechanisms supporting dynamic response capabilities
- system security plan
- contingency plan
- incident response plan
- other relevant documents or records
Interview
- Personnel with incident handling responsibilities
- personnel with information security responsibilities
- security operations center personnel
- personnel with contingency planning responsibilities
Test
- Mechanisms that support and/or implement the security operations center capability
- mechanisms that support and/or implement the incident handling process
Povezane zadeve
| Vrsta povezave | Zadeva |
|---|---|
| blocks | 03.06.01E Security Operations Center |