Interviews will focus on a review of the management, operational, and technical controls associated with the CMSR, CMS TRA security policies, procedures, and standards. Interviews will also help gain a better understanding of the system environment’s security posture and will supplement findings identified during the technical testing. When available and applicable, electronic copies of additional written documentation will be collected for review. Subject Matter Experts (SME) in the following areas will be interviewed:
