Security Controls Evaluation, Testing, and Assessment Handbook

Description

This handbook provides an approach to evaluation and testing of security controls to prove they are functioning correctly in today's IT systems. It shows you how to evaluate, examine, and test installed security controls in the world of threats and potential breach actions surrounding all industries and systems. If a system is subject to external or internal threats and vulnerabilities--which most are--then this book will provide a useful handbook for how to evaluate the effectiveness of the security controls that are in place. It provides direction on how to use SP800-53A, SP800-115, DOD Knowledge Service, and the NIST Families assessment guides to implement thorough evaluation efforts for the security controls in your organization. -- Introduction to Assessments Risk and Security Statutory & Regulatory GRC Federal RMF Requirements Risk Management Framework - SP 800-37, rev.1 Roles and Responsibilities Assessment Process Assessment Methods Assessment Techniques for each kind of control Evidence of Assessment Reporting Conclusion Appendix A: Templates for RMF documents and artifacts commonly required or requested Appendix B: Templates for RMF Policies and Procedures by Control Family Appendix C: Assessment & Testing Tools