Control Implementation Average Bar Graph in CIS-Hosted CSAT


Product Name

CIS CSAT - CIS Controls Self Assessment Tool

Product Version

vAll

Date

Jul 12, 2023



 

Problem

The Control Implementations Average bar graph is not accurately reflecting my score.

 

Solution

The Control Implementation Average graph only factors in the “Control Implemented” scoring category; it does not factor in the other 3 scoring categories. Additional information on the 4 scoring categories is available at https://cisecurity.atlassian.net/servicedesk/customer/portal/15/article/820511646 .

If the Control Implemented scoring category is set to “Implemented on All Systems” for all the sub-controls in a control, then the Control Implementation Average score would be 100. If all the sub-controls in a control are set to “Not Implemented” then the Control Implementation Average score would be 0.

The Control Average Score is a separate score. The Control Average Score stats are what you would see at the top of the Control View for a Control (if you click into a Control via the color-coded Control blocks on the Dashboard for instance):

 

See also this related knowledge base article: https://cisecurity.atlassian.net/l/cp/yq8rdhnC

Keywords - CSAT scoring score scored difference different discrepancy


Copyright © 2020

Center for Internet Security®