Assessment Question Guide

for SPECTRIM

Help

Question Guide Overview

The Assessment Question Guide has multiple guide sections to assist you in answering the questions as accurately as possible for the information resource(s) being assessed.

These sections are:

Possible Responses

Gives guidance and requirements for selecting one of the five answer choices (i.e. Implemented, Partially Implemented, Not Implemented, Unknown, and Not Applicable).

  • All questions have guidance on when you may choose “Implemented.”
  • Most questions have guidance on when you may or may not choose “Not Applicable” as an answer choice.
  • In some instances, information on when to use “Partially Implemented,” “Not Implemented” and “Unknown” is provided.

Follow the guidance below if no specific guidance is given for when to choose “Partially Implemented,” “Not Implemented” and “Unknown.”

  • Implemented - Provides the baseline requirements for when you may choose this answer choice for the question.

  • Partially Implemented – When you meet some, but not all of the requirements to choose “Implemented.”

  • Not Implemented – When you do not meet any of the requirements to choose “Implemented.”

  • Unknown – When you do not know whether or not you meet the requirements to choose “Implemented.”

  • Not Applicable – If the question does not apply to what is being assessed. In most cases this answer choice should not be used. We will provide the requirements for when to choose this answer choice.

Special Note: Because different types of information resources may have specific guidance (e.g. workstations, servers, etc), some questions will have a drop down menu next to “Possible Response.” If the resource you are assessing is not listed as drop-down item, use the “general” guidance in the default selection.


Examples

Examples are designed to help you understand what is being asked, they are not meant to be all encompassing. Examples can be used to show compliance towards controls.


Comments

Provides additional comments/guidance to clarify what is being asked.

Examples

Examples are designed to help you understand what is being asked, they are not meant to be all encompassing. Examples can be used to show compliance towards controls.

Comments

Provides additional comments/guidance to clarify what is being asked.

Possible Responses

Gives guidance and requirements for selecting one of the five answer choices (i.e. Implemented, Partially Implemented, Not Implemented, Unknown, and Not Applicable).

Follow the guidance below if no specific guidance is given for when to choose “Partially Implemented,” “Not Implemented” and “Unknown.”

Special Note: Because different types of information resources may have specific guidance (e.g. workstations, servers, etc), some questions will have a drop down menu next to “Possible Response.” If the resource you are assessing is not listed as drop-down item, use the “general” guidance in the default selection.