Procedure Step:Security Managers

Audit Step:

Determine whether specific individuals have responsibilities for developing, communicating, and monitoring compliance with security policies related to the application and reporting these activities to senior management.  Is there a central point of contact to coordinate all information security matters for the application?

Purpose:

Obtain an overview of the agency/subdivision of agency/program.