Exam CSSLP topic 2 question 55 discussion

The answer is C. Abbreviated. NIST SP 800-53A is a security and privacy control assessment guideline published by NIST. According to this guideline, there are three types of interviews that may be conducted during an assessment: 1. Abbreviated Assessment – An abbreviated assessment consists of informal and ad hoc interviews with key personnel to determine whether controls are implemented. 2. Basic Assessment – A basic assessment involves structured interviews with a sample of system users, which assesses the level of compliance with policies and procedures. 3. Comprehensive Assessment – A comprehensive assessment includes structured interviews with stakeholders representing all functional areas included in the scope of testing specified in the security plan. An abbreviated interview is informal and ad hoc where one can ask questions informally on different aspects for control implementation while assessing software applications or systems developed under software engineering principles to ensure their proper functionality and protection against possible cyber threats or attacks.