How would you score implemented coverage for one system if two of four evaluative elements were in place?
The Implemented maturity level measures whether a control is operating effectively in practice. Scoring is based on the proportion of evaluative elements in place. In this scenario, two of the four required elements are implemented. This equates to 50% compliance, so the correct score is 50. For example, if a firewall control requires four items (documented rules, change management process, monitoring, and testing), and only two are in place, the organization is halfway compliant. This method ensures that partial implementation is acknowledged but also highlights gaps needing remediation. Scores of 0, 25, or 75 would not accurately reflect two of four elements, making 50 the correct value.
Berry
24 hours agoLashon
6 days agoHaydee
11 days agoGlenna
16 days agoHelaine
22 days agoAshley
27 days agoMyrtie
2 months agoJeffrey
2 months agoJaime
2 months agoCurt
2 months agoBulah
2 months agoMagda
2 months agoLeota
3 months agoNickolas
3 months agoGoldie
3 months agoLelia
3 months agoKimberlie
3 months agoRichelle
3 months ago