A type of assessment method that is characterized by the process of checking, inspecting, reviewing, observing, studying, or analyzing one or more assessment objects to facilitate understanding, achieve clarification, or obtain evidence, the results of which are used to support the determination of security control effectiveness over time.
Source(s):
CNSSI 4009-2015
from
NIST SP 800-53A Rev. 1
NIST SP 800-137
under Examine
from
NISTIR 7298
A type of assessment method that is characterized by the process of checking, inspecting, reviewing, observing, studying, or analyzing one or more assessment objects to facilitate understanding, achieve clarification, or obtain evidence, the results of which are used to support the determination of security control or privacy control effectiveness over time.
Source(s):
NIST SP 800-53A Rev. 4
[Superseded]
under Examine