Basic assessment process
A typical process that an organization might use to perform an assessment could include:
Choosing objectives
Selecting controls or requirements to evaluate
Deciding how to evaluate those controls or requirements
Writing tests for operational effectiveness
Selecting a framework to evaluate the design
Managing the project
Assigning work
Following up
Tracking and remediating issues