Security report.

CYB-535-RS-SecurityAssessmentReportTemplate.docx

CYB-535 Security Assessment Report Template

System Assessment Report For: {System Name}

Version:

Date:

Prepared By:

Overview

Purpose

Scope

Applicable Laws and Regulations

The following laws and regulations are applicable:

Applicable Standards and Guidance

The following standards and guidance are applicable to the organization:

System Overview

System Name

General System Description and Purpose

Security Categorization

Assessment Methodology

Performed Tests

Identification of Vulnerabilities

Consideration of Threats

Performed Risk Analysis

Document Results of Security Testing

This section should include any relevant screenshots.

Security Assessment Results

Non-Conforming Controls

Recommendations (based on the appropriate risk management framework)