Assess step of the NIST RMF (SP 800-53A): the assessment objective and methods (examine, interview, test) of each control, the results provided by the assessor, the deficiencies, recommendations and points to verify. No test is claimed without the assessor's results.
Columns of the register
ControlAssessment objectiveMethodsAssessorResultDeficiencyRecommendationVerification point
What you provide
Control assessor (role) — Independent where required.
Assessment results provided by the assessor — One row per entry, e.g. AC-2; Examine, Interview; Other than satisfied; 3 dormant accounts found
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
