CGRC · Question #655
Assessment methods have a set of associated attributes which help define the level of effort for the assessment. Which of the following is the right pair of attributes? Response:
The correct answer is A. depth and coverage. The level of effort for an assessment is characterized by its depth, which indicates the rigor and detail, and its coverage, which denotes the scope of what is included.
Question
Assessment methods have a set of associated attributes which help define the level of effort for the assessment. Which of the following is the right pair of attributes? Response:
Options
- Adepth and coverage
- Bcoverage and scope
- CBreadth and coverage
- Drigor and level of detail
How the community answered
(41 responses)- A90% (37)
- B5% (2)
- C2% (1)
- D2% (1)
Why each option
The level of effort for an assessment is characterized by its depth, which indicates the rigor and detail, and its coverage, which denotes the scope of what is included.
Assessment attributes such as depth refer to the level of detail and rigor of the examination of security controls, while coverage refers to the scope or breadth of the assessment across controls, components, and system areas.
Scope is closely related to coverage, but depth is the distinct attribute defining the intensity of the assessment.
Breadth is often synonymous with coverage, but depth is the complementary attribute describing the thoroughness of the assessment.
Rigor and level of detail are aspects of depth, but 'depth and coverage' are the widely recognized primary pair of attributes.
Concept tested: Security assessment attributes
Source: https://csrc.nist.gov/publications/detail/sp/800-53a/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.