CCSFP 試験問題を無料オンラインアクセス

On an r2 assessment, HITRUST requires evidence to be linked to all maturity levels that score above 25% for Policy and Procedure, and over 0% for Implementation, Measured, and Managed.

• A.True
• B.False

Which of the following must be confirmed before inheriting requirement scores?

• A.The requirement Cross Version IDs (CVIDs) must match
• B.All of the above
• C.The requirement must be partially or fully inheritable
• D.The provider must have published the assessment for inheritance

An r2 certification is good for how many years?

• A.Until there has been a significant change in the in-scope environment
• B.Two years regardless
• C.Two years provided an interim assessment is performed, all CAPs have been remediated, and all N/As discharged
• D.Two years provided an interim assessment is performed and interim requirements are met

All assessment domains are updated with additional requirements when the AI Security factor is selected.

• A.True
• B.False

David, a member of an external assessor org, helped his client remediate a control gap. As part of the validation process David can then review the remediation for appropriateness. [0141]

• A.True
• B.False