A level of collaboration may be required between security and privacy control assessors with respect to controls that implemented to achieve both security and privacy objectives. Assessor findings must be:

Response:

Question

A level of collaboration may be required between security and privacy control assessors with respect to controls that implemented to achieve both security and privacy objectives. Assessor findings must be:

Response:

Accepted Answer

A. A factual reporting on control effectiveness and discovered vulnerabilities Assessor findings must primarily be a factual reporting of what was observed regarding control effectiveness and any identified vulnerabilities. They should be objective and based on evidence, representing an accurate account without subjective interpretation or immediate remediation prescriptions.

Answer

B. Findings and recommendations for remediation While recommendations for remediation often follow findings, the findings themselves are the objective, factual observations, not the recommendations.

Answer

C. The results of the control assessment 'The results of the control assessment' is too broad; findings are a specific component of those results, focused on objective observations.

Answer

D. All of the above Since B and C are not solely the definition of 'assessor findings' in their most precise sense, 'All of the above' is incorrect.

A level of collaboration may be required between security and privacy control assessors with respect to controls that implemented to achieve both security and privacy objectives. Assessor findings…

Question

Options

How the community answered

Why each option

Topics

Community Discussion