Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Product Name

CIS CSAT-Hosted

Product Version

All versions

Date



Problem

Info

After finishing the CIS CSAT-Hosted assessment, my organization has a 100% completion percentage. What are the next steps in the process?

Solution

There are several potential next steps:

  1. Close the existing assessment

The way to close an existing assessment in CIS CSAT-Hosted is to use the green “Assessment Menu” in the upper right corner, and then select one of the three options from the “End Current Assessment” sub-menu. This moves the current assessment to the “Assessment History”. You can still view a read-only version from the Assessment History menu on the left. The screenshot below shows where this is done:

Note

If you are not planning on starting a new assessment right away, there is also no problem with leaving the current assessment open, rather than selecting “End Current Assessment”.

2. Analyze your results; identify areas for improvement, and develop a plan

Use the CSAT Assessment Dashboard to identify low scoring CIS Controls and low scoring CIS Safeguards within those CIS Controls. Consider conducting a risk assessment using the CIS Risk Assessment Method (CIS RAM) to determine if your current CIS Controls implementation is acceptable or where it needs to be improved. Also, consider developing a plan to improve low scoring CIS Safeguards and any areas of unacceptable risk. CIS offers many other resources that can help including CIS Controls companion and implementation guides, and other tools including the CIS Configuration Assessment Tool (CIS-CAT). Please see the following links for more information:

https://csat.readthedocs.io/en/stable/source/csat_pro_user_guide/#scoring documentation goes to CSAT Pro, but some of the information should be transferable.

3. Conduct another assessment with CSAT

Your organization’s cybersecurity posture changes over time. It’s important to track those changes. You can either keep updating your existing assessment in CSAT, or you can close your current assessment and start a new one as described above. Either way, you want to maintain a current understanding of your organization’s cyber readiness and try to make continuous improvements. Organizations may want to continuously update their assessments or they may want to conduct full assessments on a periodic basis (every 6 months, every year, etc.). Please see the following link for more information: https://csat.readthedocs.io/en/stable/source/csat_pro_user_guide/#assessments_1.

Keywords; csat hosted 100 completion assessment

Content by Label

Filter by label (Content by label)
showLabelsfalse
showSpacefalse
cqllabel = "sbp_fer"

Copyright © 2020

Center for Internet Security®


Page Properties
hiddentrue

Action

Name(s)

Date

Linked ticket

Created by

Reviewed by

Approved by

Remove by