A planning estimate for the amount of days that it takes to assess a Moderate system is ___ - ___ days. Response:

Industry best practices and common government guidelines for assessment and authorization (A&A) processes often suggest that a Moderate impact system requires approximately 3 to 5 days for a thorough security assessment. This timeframe allows for adequate testing, evidence collection, and analysis of the system's security posture.

5-7 days is typically an estimate for a High impact system, which requires more extensive assessment.

While 3-6 days includes the correct range, 3-5 is the more commonly cited and precise estimate for a Moderate system.

4-7 days is also broader and less precise than the commonly accepted 3-5 day estimate for Moderate systems.