Ensure continuous communication with the assessment team.

Ensure continuous communication with the customer.

Don t forget about the comfort needs of the assessment team.

Work with the customer to create a manageable schedule for the onsite interviews.

Utilize the opening meeting to establish a positive tone for the assessment.

Reiterate the agreed-on assessment plan during the opening meeting so that everyone understands the scope of the effort.

Review the assessment process and its benefits in the opening meeting.

Keep the customer involved and informed throughout the entire assessment process.

Be prepared to not only assess but to educate the customer throughout the assessment process.

The 18 categories focus on management, technical, and operational controls to address the customer s security posture.

The 18 categories can be used as a guide to help focus the questions to be asked during the interview process.

Common themes of documentation and education training and awareness apply across all 18 categories.

All 18 categories must be addressed to be officially compliant with the NSA IAM, but additional areas may be added at the customer s request.

Interviewer must be dynamic and able to facilitate conversation with the interviewee.

Limit the number of people in the interview to just the necessities. Generally this will be two or three people, with one person designated to take good notes.

Try to understand how security is...