Paso Assess del NIST RMF (SP 800-53A): el objetivo y los métodos de evaluación (examinar, entrevistar, probar) de cada control, los resultados que aporta el evaluador, las deficiencias, las recomendaciones y los puntos que verificar. No se declara ninguna prueba sin los resultados del evaluador.
Columnas del registro
ControlObjetivo de evaluaciónMétodosEvaluadorResultadoDeficienciaRecomendaciónPunto de verificación
Lo que usted aporta
Control assessor (role) — Independent where required.
Assessment results provided by the assessor — One row per entry, e.g. AC-2; Examine, Interview; Other than satisfied; 3 dormant accounts found
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
