thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

RMF Assess Step

RMF step where an assessor determines whether controls are implemented correctly, operating as intended, and producing desired outcomes.

Definition

An independent assessor develops an assessment plan, conducts assessments using SP 800-53A methods (examine, interview, test), and produces a security assessment report. Initial remediation actions may be taken, and a plan of action and milestones is prepared for remaining weaknesses.

Example

A third-party assessment team tests account management controls and records findings in the SAR.

Exam tip

Assessor independence is emphasized, especially for moderate and high systems.

Related terms