Control Implementation Average Bar Graph in CIS-Hosted CSAT
Product Name
CIS CSAT - CIS Controls Self Assessment Tool
Product Version
vAll
Date
Jul 12, 2023
Ā
Problem
The Control Implementations Average bar graph is not accurately reflecting my score.
Ā
Solution
The Control Implementation Average graph only factors in the āControl Implementedā scoring category; it does not factor in the other 3 scoring categories. Additional information on the 4 scoring categories is available at https://cisecurity.atlassian.net/servicedesk/customer/portal/15/article/820511646 .
If the Control Implemented scoring category is set to āImplemented on All Systemsā for all the sub-controls in a control, then the Control Implementation Average score would be 100. If all the sub-controls in a control are set to āNot Implementedā then the Control Implementation Average score would be 0.
The Control Average Score is a separate score. The Control Average Score stats are what you would see at the top of the Control View for a Control (if you click into a Control via the color-coded Control blocks on the Dashboard for instance):
Ā
See also this related knowledge base article: https://cisecurity.atlassian.net/l/cp/yq8rdhnC
Keywords - CSAT scoring score scored difference different discrepancy
Ā