CGRC · Question #171
Which Certification Level of Effort is indicated by exercise-based and independent assessments? Response:
The correct answer is A. High. Exercise-based and independent assessments are highly resource-intensive and demand significant expertise, thus indicating a high level of effort for security certification processes.
Question
Which Certification Level of Effort is indicated by exercise-based and independent assessments? Response:
Options
- AHigh
- BLow
- CModerate
- DMedium
How the community answered
(26 responses)- A85% (22)
- B8% (2)
- C4% (1)
- D4% (1)
Why each option
Exercise-based and independent assessments are highly resource-intensive and demand significant expertise, thus indicating a high level of effort for security certification processes.
Exercise-based assessments involve dynamic simulations of real-world threats, requiring extensive planning, execution, and specialized personnel. Independent assessments, typically conducted by external entities, demand rigorous and unbiased evaluations, both contributing to a high level of effort due to their comprehensive nature and depth of scrutiny.
Low levels of effort are associated with simpler assessment methods, not comprehensive exercise-based or independent evaluations.
Moderate levels of effort typically involve more basic testing and documentation reviews, falling short of the rigor required for exercise-based assessments.
Medium levels of effort are not sufficiently comprehensive to cover the extensive scope and resources needed for exercise-based and independent assessments.
Concept tested: Certification assessment effort levels
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53A-rev5.pdf
Topics
Community Discussion
No community discussion yet for this question.