Security Assessment Report

Help
These tools are designed for desktop use and work best on a larger screen.
Controls Satisfied
Not assessed
Residual Risk Determination

Assessment Methods (SP 800-53A)

Determination

Assessor Findings

When to choose each determination.
Satisfied
All assessment objectives are met: the control is implemented and operating as the statement above describes, confirmed by the evidence you examined, interviews, and/or tests. Example: configuration settings, records, and test results show the control working with no gaps.
Other Than Satisfied
One or more objectives are not met: the control is missing, partially implemented, not operating effectively, or the evidence is incomplete or inconsistent. Record the specific weakness and its risk so it flows to the POA&M. Example: the policy exists but isn't enforced; or MFA covers remote but not local privileged access.
Not Applicable
The control does not apply to this system's architecture, environment, or authorization boundary. Record a brief rationale. Example: a wireless-access control for a system with no wireless capability.
Tip: click a determination above to select it.

Add Controls to Assessment Scope

0 selected

Prefill from SSP: a draft starting point

This reads your System Security Plan and brings its documented SP 800-53 controls into the assessment scope, carrying each control's implementation status across as context.

This is a draft, not a finished assessment. Don't import and submit. A SAR records an independent determination: the assessor must examine, interview, and/or test before concluding a control is Satisfied. Prefill seeds a suggested determination from the SSP status only to save typing. Review every control (record your methods and findings) before relying on the result.

Only controls you haven't assessed yet are seeded; your existing determinations are kept.

Reset Assessment?

All saved progress will be permanently cleared. Save a JSON backup first, or reset without saving.

Print Report

Choose what to include, then continue to your browser's print dialog (where you can print or save as PDF).

Save as JSON

.json