Assessment Objective
Determine if:
- PM-32 [Assignment: systems or system components] supporting mission-essential services or functions are analyzed to ensure that the information resources are being used in a manner that is consistent with their intended purpose.
Assessment Methods
Examine
- Information security program plan
- privacy program plan
- list of essential services and functions
- organizational analysis of information resources
- risk management strategy
- other relevant documents or records.
Interview
- Organizational personnel with information security, privacy, and supply chain risk management program responsibilities
Länkade ärenden
| Länktyp | Ärende |
|---|---|
| blocks | PM-32 Purposing |