id: "SI-06(02)" title: "Automation Support for Distributed Testing" family: "SI" family_name: "System and Information Integrity" sort_id: "si-06.02" priority: "P1" implementation_level: "system" parent: "SI-06" enhancement: True


Statement

Implement automated mechanisms to support the management of distributed security and privacy function testing.

Guidance

The use of automated mechanisms to support the management of distributed function testing helps to ensure the integrity, timeliness, completeness, and efficacy of such testing.

Assessment Objective: automated mechanisms are implemented to support the management of distributed security function testing;

Assessment Objective: automated mechanisms are implemented to support the management of distributed privacy function testing.

System and information integrity policy

system and information integrity procedures

procedures addressing security and privacy function verification

system design documentation

system configuration settings and associated documentation

system audit records

system security plan

privacy plan

other relevant documents or records

Organizational personnel with security and privacy function verification responsibilities

organizational personnel implementing, operating, and maintaining the system

system/network administrators

organizational personnel with information security and privacy responsibilities

Organizational processes for security and privacy function verification

automated mechanisms supporting and/or implementing the management of distributed security and privacy testing