A type of assessment method that is characterized by the process of conducting discussions with individuals or groups within an organization to facilitate understanding, achieve clarification, or lead to the location of evidence, the results of which are used to support the determination of security control effectiveness over time.
Source(s):
CNSSI 4009-2015
from
NIST SP 800-53A Rev. 1
NIST SP 800-137
under Interview
from
NISTIR 7298
A type of assessment method that is characterized by the process of conducting discussions with individuals or groups within an organization to facilitate understanding, achieve clarification, or lead to the location of evidence, the results of which are used to support the determination of security control and privacy control effectiveness over time.
Source(s):
NIST SP 800-53A Rev. 4
under Interview