thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

NIST SP 800-53A

NIST guide for assessing security and privacy controls, defining assessment procedures and methods.

Definition

SP 800-53A Rev. 5 provides assessment objectives and procedures for each SP 800-53 control using three methods: examine, interview, and test. It defines depth and coverage attributes for rigor. Assessors use it to build assessment plans and produce SARs.

Example

An assessor examines the audit policy, interviews the administrator, and tests log generation for AU-2.

Exam tip

The three assessment methods are examine, interview, and test.

Related terms