Study. uk . com
  1. Home
  2. All questions
  3. Question 402

CISSP study material · question 402 of 500

An assessor could not obtain the evidence needed to judge a determination statement before the assessment window closed. How should this be recorded under SP 800-53A?

  1. As out of scope, since the object was not assessed.
  2. As other than satisfied, with the report explaining why the determination could not be made.
  3. As satisfied, since no deficiency was demonstrated.
  4. As deferred, pending a supplementary assessment.
Show the answer

Answer: B. As other than satisfied, with the report explaining why the determination could not be made.

Other than satisfied covers a potential anomaly in the control, or an assessor unable to gather enough information, for reasons the report has to state.

Source: NIST SP 800-53A Rev. 5 (NIST) — SP 800-53A Rev. 5 > 3.3 Conduct Security and Privacy Control Assessments

Challenge yourself on this topic → Study as cards