SI-6(3)

Requirement

Report the results of security and privacy function verification to [Assignment: organization-defined personnel or roles].

Discussion

Organizational personnel with potential interest in the results of the verification of security and privacy functions include systems security officers, senior agency information security officers, and senior agency officials for privacy.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and information integrity policy; system and information integrity procedures; procedures addressing security and privacy function verification; system design documentation; system configuration settings and associated documentation; reports of security and privacy function verification results; system audit records; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with security and privacy function verification responsibilities; organizational personnel who are recipients of security and privacy function verification reports; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Organizational processes for reporting security and privacy function verification results; mechanisms supporting and/or implementing the reporting of security and privacy function verification results].

ID	Assessment Objectives
SI-06(03)[02]	the results of privacy function verification are reported to <SI-06(03)_ODP personnel or roles>.
SI-06(03)[01]	the results of security function verification are reported to <SI-06(03)_ODP personnel or roles>;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!