NIST 800-53 Rev 5
424 controls available
CA-8(1)high
Independent Penetration Testing Agent or Team
Assessment, Authorization, and Monitoring
Control Statement
Employ an independent penetration testing agent or team to perform penetration testing on the system or system components.
Discussion
Independent penetration testing agents or teams are individuals or groups who conduct impartial penetration testing of organizational systems. Impartiality implies that penetration testing agents or teams are free from perceived or actual conflicts of interest with respect to the development, operation, or management of the systems that are the targets of the penetration testing. [CA-2(1)](#ca-2.1) provides additional information on independent assessments that can be applied to penetration testing.
- Framework
- NIST SP 800-53 Rev 5
- Family
- Assessment, Authorization, and Monitoring
- Baselines
- high
Related Frameworks
2 paths across 2 frameworks
Related Frameworks
SCF1 mapping
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
CCI1 mapping
CCI-002096
1.00
- DISA · 2025-01-23 · disa_cci_list · equivalent
Related STIGs
No STIGs in the current catalog reference any CCI mapped to this control.