id: "SI-06(02)" title: "Automation Support for Distributed Testing" family: "SI" family_name: "System and Information Integrity" sort_id: "si-06.02" priority: "P1" implementation_level: "system" parent: "SI-06" enhancement: True
Statement
Implement automated mechanisms to support the management of distributed security and privacy function testing.
Guidance
The use of automated mechanisms to support the management of distributed function testing helps to ensure the integrity, timeliness, completeness, and efficacy of such testing.
Assessment Objective: automated mechanisms are implemented to support the management of distributed security function testing;
Assessment Objective: automated mechanisms are implemented to support the management of distributed privacy function testing.
System and information integrity policy
system and information integrity procedures
procedures addressing security and privacy function verification
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
privacy plan
other relevant documents or records
Organizational personnel with security and privacy function verification responsibilities
organizational personnel implementing, operating, and maintaining the system
system/network administrators
organizational personnel with information security and privacy responsibilities
Organizational processes for security and privacy function verification
automated mechanisms supporting and/or implementing the management of distributed security and privacy testing