Introduction

This chapter introduces the reader to the onsite assessment phase of the IAM and associated activities. By the end of this chapter, the reader should have an understanding of the preparation necessary to conduct the onsite activities, the importance and necessity of setting the tone of the assessment, the basics of the NSA Baseline Classes and Categories, and the process of conducting the security interviews. This process is intended to help the customer be comfortable and not run away from the assessment team.

NSA has emphasized the importance of the assessment team developing a strong relationship with the customer when conducting the IAM process. Through experience, we have seen how important connecting with the customer can be in creating a positive assessment environment and getting the most useful information out of the customer. This relationship building starts with the first introduction made during the contracting process and continues through the pre-assessment, onsite, and post-assessment phases.