Glossary: Compliance, Privacy and Penetration Testing

Assessment

Also written: external assessment

A review of how well controls work, usually to find weaknesses and improve them. An external assessment, such as Dana's PCI DSS assessment, ends in findings and recommendations rather than a formal opinion.

Where the book teaches it

Chapter 3: Gathering Audit Evidence and Setting the Scope
Chapter 4: Types of Audit and Assessment
Chapter 5: Penetration Testing

Related terms

Audit Examination QSA Gap analysis Finding