SI-6(2)

Requirement

Implement automated mechanisms to support the management of distributed security and privacy function testing.

Discussion

The use of automated mechanisms to support the management of distributed function testing helps to ensure the integrity, timeliness, completeness, and efficacy of such testing.

Title

Security and Privacy Function Verification | Automation Support for Distributed Testing
Family

System and Information Integrity
NIST 800-53B Baseline(s)

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and information integrity policy; system and information integrity procedures; procedures addressing security and privacy function verification; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with security and privacy function verification responsibilities; organizational personnel implementing, operating, and maintaining the system; system/network administrators; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Organizational processes for security and privacy function verification; automated mechanisms supporting and/or implementing the management of distributed security and privacy testing].

ID	Assessment Objectives
SI-06(02)[01]	automated mechanisms are implemented to support the management of distributed security function testing;
SI-06(02)[02]	automated mechanisms are implemented to support the management of distributed privacy function testing.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!