Control Implementation Average Bar Graph in CIS-Hosted CSAT


Product Name

CIS CSAT - CIS Controls Self Assessment Tool

Product Version

vAll

Date

Jul 12, 2023



Ā 

Problem

The Control Implementations Average bar graph is not accurately reflecting my score.

Ā 

Solution

The Control Implementation Average graph only factors in the ā€œControl Implementedā€ scoring category; it does not factor in the other 3 scoring categories. Additional information on the 4 scoring categories is available at https://cisecurity.atlassian.net/servicedesk/customer/portal/15/article/820511646 .

If the Control Implemented scoring category is set to ā€œImplemented on All Systemsā€ for all the sub-controls in a control, then the Control Implementation Average score would be 100. If all the sub-controls in a control are set to ā€œNot Implementedā€ then the Control Implementation Average score would be 0.

The Control Average Score is a separate score. The Control Average Score stats are what you would see at the top of the Control View for a Control (if you click into a Control via the color-coded Control blocks on the Dashboard for instance):

Ā 

See also this related knowledge base article: https://cisecurity.atlassian.net/l/cp/yq8rdhnC

Keywords - CSAT scoring score scored difference different discrepancy


Copyright Ā© 2020

Center for Internet SecurityĀ®


Ā