nerdexam
(ISC)2

CGRC · Question #655

Assessment methods have a set of associated attributes which help define the level of effort for the assessment. Which of the following is the right pair of attributes? Response:

The correct answer is A. depth and coverage. The level of effort for an assessment is characterized by its depth, which indicates the rigor and detail, and its coverage, which denotes the scope of what is included.

Assessment/Audit of Security and Privacy Controls

Question

Assessment methods have a set of associated attributes which help define the level of effort for the assessment. Which of the following is the right pair of attributes? Response:

Options

  • Adepth and coverage
  • Bcoverage and scope
  • CBreadth and coverage
  • Drigor and level of detail

How the community answered

(41 responses)
  • A
    90% (37)
  • B
    5% (2)
  • C
    2% (1)
  • D
    2% (1)

Why each option

The level of effort for an assessment is characterized by its depth, which indicates the rigor and detail, and its coverage, which denotes the scope of what is included.

Adepth and coverageCorrect

Assessment attributes such as depth refer to the level of detail and rigor of the examination of security controls, while coverage refers to the scope or breadth of the assessment across controls, components, and system areas.

Bcoverage and scope

Scope is closely related to coverage, but depth is the distinct attribute defining the intensity of the assessment.

CBreadth and coverage

Breadth is often synonymous with coverage, but depth is the complementary attribute describing the thoroughness of the assessment.

Drigor and level of detail

Rigor and level of detail are aspects of depth, but 'depth and coverage' are the widely recognized primary pair of attributes.

Concept tested: Security assessment attributes

Source: https://csrc.nist.gov/publications/detail/sp/800-53a/rev-5/final

Topics

#Assessment methods#Assessment attributes#Depth#Coverage

Community Discussion

No community discussion yet for this question.

Full CGRC Practice