Passo Assess do NIST RMF (SP 800-53A): o objetivo e os métodos de avaliação (examinar, entrevistar, testar) de cada controlo, os resultados fornecidos pelo avaliador, as deficiências, as recomendações e os pontos a verificar. Nenhum teste é declarado sem os resultados do avaliador.
Colunas do registo
ControloObjetivo de avaliaçãoMétodosAvaliadorResultadoDeficiênciaRecomendaçãoPonto de verificação
O que indica
Control assessor (role) — Independent where required.
Assessment results provided by the assessor — One row per entry, e.g. AC-2; Examine, Interview; Other than satisfied; 3 dormant accounts found
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
