A control that is not documented cannot be measured. [0126]
Suggested Answer: A
Get Premium CCSFP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
For the Measured domain, evidence must exist that controls are being evaluated for effectiveness.
Without documentation, a control cannot be measured, as there is no evidence of monitoring or review activity.
Documentation is the basis for determining repeatability, maturity, and strength in the scoring model.
Extract Reference (HITRUST Scoring Methodology [0126]):
If a control is undocumented, it cannot be evaluated in the Measured domain, as measurement requires documentation of monitoring.
22 comments · newest first
JE
Jeff
2 days ago
Agreed, documentation is key for control measurement.
BO
Boris
7 days ago
I think it's true. Without documentation, how can we measure it?
LI
Lillian
12 days ago
True makes more sense. Documentation is key for accuracy.
JU
Judy
18 days ago
I lean towards false. Some controls can be measured informally.
LI
Lizbeth
23 days ago
Still, it needs to be documented to be valid.
SA
Salley
28 days ago
But what if it's just informal?
DE
Demetra
1 month ago
Agreed, no documentation means no measurement.
ER
Erin
1 month ago
I think it's true.
GE
Germaine
1 month ago
Not so sure, there might be exceptions.
SH
Sherrell
2 months ago
Documentation is key for any control, no doubt.
DA
Daniel
2 months ago
Surprised this is even a question, seems obvious!
RO
Rosalyn
2 months ago
I think it can be measured in some cases, though.
AB
Abraham
2 months ago
Totally agree, no docs means no way to track it.
IS
Isaac
2 months ago
I don't know, seems a bit extreme to say it's impossible.
CH
Charlesetta
2 months ago
True, without documentation, how can you even measure effectiveness?
KE
Keva
3 months ago
Surprised to hear that, I thought some controls could be inferred.
SH
Shay
3 months ago
That's a solid point, but isn't there a way to estimate?
JO
Johnna
3 months ago
Totally agree, no docs means no way to track it.
FR
Francine
3 months ago
I'm torn on this one. I recall discussing how some controls can be assessed without documentation, but maybe that’s not the case for all of them?
RE
Reena
3 months ago
I believe the answer is A) True because without documentation, how can you verify or measure the control's effectiveness?
MA
Marget
4 months ago
This sounds similar to a practice question we did on control assessments. I feel like documentation is important, but I'm not confident about the wording here.
PE
Pearlie
5 months ago
I think I remember something about documentation being crucial for controls, but I'm not entirely sure if that means they can't be measured at all.