Control Implementation Average Bar Graph in CIS-Hosted CSAT
- Nick Romanzo
- Amanda McGown
Product Name
CIS CSAT - CIS Controls Self Assessment Tool
Product Version
vAll
Date
Jul 12, 2023
Problem
The Control Implementations Average bar graph is not accurately reflecting my score.
Solution
The Control Implementation Average graph only factors in the “Control Implemented” scoring category; it does not factor in the other 3 scoring categories. Additional information on the 4 scoring categories is available at How are CIS CSAT scoring categories defined? .
If the Control Implemented scoring category is set to “Implemented on All Systems” for all the sub-controls in a control, then the Control Implementation Average score would be 100. If all the sub-controls in a control are set to “Not Implemented” then the Control Implementation Average score would be 0.
The Control Average Score is a separate score. The Control Average Score stats are what you would see at the top of the Control View for a Control (if you click into a Control via the color-coded Control blocks on the Dashboard for instance):
See also this related knowledge base article: https://cisecurity.atlassian.net/l/cp/yq8rdhnC
Keywords - CSAT scoring score scored difference different discrepancy