Challenge: Categorize assessment findings

(upbeat music) … - [Instructor] As I mentioned in this chapter, … you can gather a lot of findings … when you conduct your security assessment. … It's helpful to come up with a way to categorize … your findings to make it easier to read … and understand the results of your assessment. … It can also be a good way to see if there are patterns … of problems or parts of the security program … that are especially weak. … There are many ways to categorize your findings, … but I prefer the control families defined by NIST … special publication 800-53. … These control families are a logical and detailed … breakdown of all possible security controls. … In this challenge, … to get some categorizing practice, … you'll select the correct NIST control family … for some common security assessment findings. … Here are four common security assessment findings: … missing security patches, … users have not received security awareness training, … transmitting sensitive information without encryption, … and no security officer. …