PM-6

Requirement

Develop, monitor, and report on the results of information security and privacy measures of performance.

Discussion

Measures of performance are outcome-based metrics used by an organization to measure the effectiveness or efficiency of the information security and privacy programs and the controls employed in support of the program. To facilitate security and privacy risk management, organizations consider aligning measures of performance with the organizational risk tolerance as defined in the risk management strategy.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Information security program plan; privacy program plan; information security measures of performance; privacy measures of performance; procedures addressing the development, monitoring, and reporting of information security and privacy measures of performance; risk management strategy; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with information security and privacy program planning and plan implementation responsibilities; organizational personnel responsible for developing, monitoring, and reporting information security and privacy measures of performance; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Organizational processes for developing, monitoring, and reporting information security and privacy measures of performance; mechanisms supporting the development, monitoring, and reporting of information security and privacy measures of performance].

ID	Assessment Objectives
PM-06[02]	information security measures of performance are monitored;
PM-06[03]	the results of information security measures of performance are reported;
PM-06[04]	privacy measures of performance are developed;
PM-06[05]	privacy measures of performance are monitored;
PM-06[06]	the results of privacy measures of performance are reported.
PM-06[01]	information security measures of performance are developed;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!