💼 CA-8 Penetration Testing

• Contextual name: 💼 CA-8 Penetration Testing
• ID: /frameworks/nist-sp-800-53-r5/ca/08
• Located in: 💼 CA Assessment, Authorization, And Monitoring

Description

Conduct penetration testing [Assignment: organization-defined frequency] on [Assignment: organization-defined systems or system components].

Similar

• Internal
  • ID: dec-c-548a7bcb

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 FedRAMP High Security Controls → 💼 CA-8 Penetration Testing (L)(M)(H)	2
💼 FedRAMP Low Security Controls → 💼 CA-8 Penetration Testing (L)(M)(H)
💼 NIST CSF v2.0 → 💼 ID.IM-01: Improvements are identified from evaluations			10
💼 NIST CSF v2.0 → 💼 ID.IM-02: Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties			23
💼 NIST CSF v2.0 → 💼 ID.IM-03: Improvements are identified from execution of operational processes, procedures, and activities			24
💼 NIST CSF v2.0 → 💼 ID.RA-01: Vulnerabilities in assets are identified, validated, and recorded			22

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 CA-8(1) Penetration Testing _ Independent Penetration Testing Agent or Team
💼 CA-8(2) Penetration Testing _ Red Team Exercises
💼 CA-8(3) Penetration Testing _ Facility Penetration Testing