Task: Review Active Security Controls

Relationships

Roles	Primary Performer: Security Analyst	Additional Performers: Security Manager
Inputs	Mandatory: Configuration Information Identity and Access Monitoring Data Security Management Framework Security Monitoring Data Security Plan Security Violation Service Level Agreements (SLAs), Operational Level Agreements (OLAs), and Underpinning Contracts (UCs)	Optional: Security Procedures and Infrastructure
Outputs	Security Controls Analysis

Main Description

Examine and understand the security controls that are currently in operation and compare against the Security Management Framework and the Security Plan. Identify those security controls that are inconsistent with the Security Management Framework and Security Plan

More Information

Tool Mentors	TAM - Monitor, Assess, Audit and Report Security ITIM - Monitor, Assess, Audit and Report Security SCM - Monitor, Assess, Audit and Report Security ITPM - Monitor, Assess, Audit and Report Security