Study. uk . com
  1. Home
  2. All questions
  3. Question 401

CISSP study material · question 401 of 500

An assessor wants to record a determination statement as partially satisfied because most of the control is in place. What does SP 800-53A allow?

  1. Satisfied, partially satisfied or other than satisfied.
  2. Satisfied, not applicable or other than satisfied.
  3. Only satisfied or other than satisfied; there is no intermediate value.
  4. Any scale the organisation defines, provided it is documented.
Show the answer

Answer: C. Only satisfied or other than satisfied; there is no intermediate value.

SP 800-53A scores each determination statement as satisfied or other than satisfied; there is no partially satisfied value in the scheme.

Source: NIST SP 800-53A Rev. 5 (NIST) — SP 800-53A Rev. 5 > 3.3 Conduct Security and Privacy Control Assessments

Challenge yourself on this topic → Study as cards