How to complete the scoring process in CSAT Pro


Product Name

CIS CSAT Pro - SecureSuite CIS Controls Self Assessment Tool

Product Version

 

Date

Nov 15, 2023



Problem

I’m having trouble understanding the steps to take to complete the scoring process

Solution

After creating an assessment, your assessment Dashboard page should look similar to the picture below.

Please note that the 18 CIS Safeguards are in red because they have not been completed and validated.

Complete the steps below for each Safeguard:

  1. Click on the Control in red. We will start with CIS CO1, which is Control 1.

  2. That will send you to the “CIS Control 1: Inventory and Control of Enterprise Assets”, as seen below:

CIS Control 1: Inventory and Control of Enterprise Assets

3. At this point, please reference the Scoring section of the CSAT Pro User Guide. 1.1 Establish and Maintain Detailed Enterprise Asset Inventory is the first Safeguard for Control 1. Each CIS Safeguard can be assigned a whole number score of 1 through 5. Reference ranges are provided with each option; for instance, if an organization has a Safeguard implemented on 50% of their systems, they could select a score of 3 which has a reference range of "41 -- 60%". So, if we select 3 for Safeguard 1.1, then it would look like this:

Please note that if you want to exclude a Safeguard, then you toggle Applicable to off as seen in the screenshot below:

  1. Now that Safeguard 1.1 has a score, select Complete:

  1. Once you select Complete, the Validate and Send Back options appear. The Send Back option allows an admin to enter a comment in a pop-up window and after clicking Send Back in that window, it will revert to being uncompleted. If the Safeguard is indeed Complete, then the next step is to validate.

  1. After selecting Validate the Revert Validation option appears. Select Revert Validation if you want to revert or reset the Safeguard back to its original state.

7. Once you complete validation for Safeguard 1.1, you can see the scoring for the Control goes from 0% completed and validated to 20%. That is because there are five Safeguards and we’ve only completed and validated one of the five, so 20% of them.

 

  1. To complete the assessment, complete steps 1-7 for the rest of the Controls and Safeguards.

Keywords; CSAT Pro scoring assessment safeguard validate complete

Content by Label


Copyright © 2020

Center for Internet Security®