NIST SP 800-53A defines three types of interview depending on the level of assessment conducted. Which of the following NIST SP 800-53A interviews consists of informal and ad hoc interviews?

The correct answer is C. Abbreviated. NIST SP 800-53A defines three assessment interview depths: Abbreviated, Substantial, and Comprehensive. The Abbreviated interview is the most basic level and consists of informal, ad hoc discussions - typically brief conversations with key personnel to obtain a general understand

Assessment/Audit of Security and Privacy Controls

Question

Options

ASubstantial
BSignificant
CAbbreviated
DComprehensive

How the community answered

(47 responses)

A
6% (3)
B
2% (1)
C
87% (41)
D
4% (2)

Explanation

NIST SP 800-53A defines three assessment interview depths: Abbreviated, Substantial, and Comprehensive. The Abbreviated interview is the most basic level and consists of informal, ad hoc discussions - typically brief conversations with key personnel to obtain a general understanding of security controls. The Substantial interview involves broader, more structured questioning. The Comprehensive interview is the most thorough, involving in-depth discussions that probe for detailed evidence and understanding. 'Significant' is not a defined NIST SP 800-53A interview type.

Topics

#NIST SP 800-53A#Assessment Methods#Interview Types#Control Assessment

Community Discussion

No community discussion yet for this question.

Full CAP Practice