Appendix A: Forms, Worksheets, and Templates

Note	In addition to copying the documents available on the next few pages, you can download versions of the documents from the Syngress Solutions Web site for the title Security Assessment: Case Studies for Implementing the NSA IAM.

IAM Pre-Assessment Site Visit Checklist

Organization Name:	Date:
Assessment Team Leader:	Assessment Team Members:
Organization Primary Point of Contact (POC):
	Title
	Address
	Desk Phone
	Mobile Phone/Pager
	E-mail
Organization Representative:
	Title
	Address
	Desk Phone
	Mobile Phone/Pager
	E-mail
Organization Representative:
	Title
	Address
	Desk Phone
	Mobile Phone/Pager
	E-mail
Organization Representative:
	Title
	Address
	Desk Phone
	Mobile Phone/Pager
	E-mail
	Forms, Worksheets, and Templates

Preparation

1.	IAM Planning Survey	Customized and delivered to client?	o
		Received and reviewed?	o
2.	Travel Arrangements	Air?	o
		Hotel?	o
		Car?	o
3.	Team Composition: Technical	Technical personnel available and scheduled?	o
4.	Team Composition: Industry	Industry-knowledgeable personnel available and scheduled?	o
5.	Customer Scheduling	All appropriate customer personnel available and scheduled for visit?	o

Consideration

In this section, record customer expectations or concerns and describe relevancy to assessment.

Organizational Expectations

1. ______________________________________________________________

2. ______________________________________________________________

3. ______________________________________________________________

Activities

1.	Mission Identification	Understood and documented as pertaining to security.	o
2.	Organizational Information Criticality	Performed and documented with organization.	o
3.	System Information Criticality	Performed and documented with organization.	o
4.	System Security Environment	Documented and verified with organization.	o
5.

< Previous Excerpt

Purchase This Book