IAO-06
Technical Verification
Description
Mechanisms exist to perform Information Assurance Program (IAP) activities to evaluate the design, implementation and effectiveness of technical cybersecurity and data protection controls.
Control Question
Does the organization perform Information Assurance Program (IAP) activities to evaluate the design, implementation and effectiveness of technical cybersecurity and data protection controls?
Control Metadata
Domain:
Information Assurance
Validation Cadence:
Annual
