During the course of the assessment, the will also scrutinize personnel and the physical environment, as applicable, to determine if security policies and procedures are being followed. Examples of areas that may be included are:
Reporting
This section outlines how the will report vulnerabilities during the assessment.
Security Control Assessment Findings Spreadsheet
The assessment findings spreadsheet (Table 4) is a running tabulation of findings identified during the assessment that is reviewed during Daily Out-Briefs (DOBs). Findings are broken out by day and then sorted according to risk level. For updates to a previous day’s findings, the updated cell is highlighted in yellow. Although high and moderate risk-level findings are discussed during the DOBs, questions pertaining to low risk-level findings may be raised for clarification. Further details about the spreadsheet columns are listed in the following sections.
