Skip to main content

Basic assessment process

A typical process that an organization might use to perform an assessment could include:

  1. Choosing objectives

  2. Selecting controls, requirements, or risks to evaluate

  3. Deciding how to evaluate those controls, requirements, or risks

    1. Writing tests for operational effectiveness

    2. Selecting a framework to evaluate the design

  4. Managing the project

    1. Assigning work

    2. Collaboration

    3. Following up

  5. Tracking and remediating issues

In this section: