11.1.2Processes and mechanisms for regularly testing security of systems and networks are defined and understood

Defined Approach Requirements:

Roles and responsibilities for performing activities in Requirement 11 are documented, assigned, and understood.

Defined Approach Testing Procedures:

11.1.2.a Examine documentation to verify that descriptions of roles and responsibilities for performing activities in Requirement 11 are documented and assigned.

11.1.2.b Interview personnel with responsibility for performing activities in Requirement 11 to verify that roles and responsibilities are assigned as documented and are understood