CCI-001073

The organization employs an independent penetration agent or penetration team to perform penetration testing on the information system based on the vulnerability analysis to determine the exploitability of identified vulnerabilities.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-001073.