How are individual organization assessment and industry average scores calculated in CSAT?
Product Name
CIS CSAT (Controls Self Assessment Tool)
Product Version
all
Date
Jul 23, 2020
For an individual organization's assessment (not industry averages) the score calculation works as follows:
A Sub-Control's score is calculated based on the applicable scoring categories within that Sub-Control
All applicable Sub-Controls within a Control are averaged together to calculate the Control Average Score for that assessment.
The assessment average for the organization (shown as "Organization Average" on the main Dashboard and "Overall Score" on the pages for particular Controls) is calculated by averaging the scores of all applicable Controls in the assessment
For the industry average, the score calculation works as follows:
The Control Industry Average Score for a particular Control is calculated by averaging the Control Average Scores for that Control in each of the organizations in that industry that have identified that Control as applicable.
The assessment level Industry Average for that industry is calculated by averaging the Organization Averages for all of the organizations in that industry. (Note: this is different than averaging the Control Industry Average scores for all Controls in that industry).
Copyright © 2020 Center for Internet Security® Privacy Policy