Study. uk . com
  1. Home
  2. All questions
  3. Question 399

CISSP study material · question 399 of 500

Why does SP 800-53A tie each determination statement to the wording of the control it assesses?

  1. So that determination statements can be reused across unrelated controls.
  2. So that organisation-defined parameters need not be recorded separately.
  3. So that assessment results remain traceable back to the fundamental control requirement.
  4. So that assessors can score controls without reading the control text.
Show the answer

Answer: C. So that assessment results remain traceable back to the fundamental control requirement.

An assessment objective includes determination statements linked to the content of the control, to ensure the traceability of assessment results back to the fundamental control requirements.

Source: NIST SP 800-53A Rev. 5 (NIST) — SP 800-53A Rev. 5 > 2.4 Assessment Procedures

Challenge yourself on this topic → Study as cards