Save the answer, evidence reference, owner and remedial action for each question. Select the next task from the weak evidence, not merely the lowest point total.
| Record | What to include |
|---|---|
| Version | Quiz version/date and any changed criteria |
| Participants | Roles contributing answers |
| Answers | One choice per question and supporting evidence |
| Gates | Pass, unresolved or blocked, with reason |
| Action plan | Owner and completion evidence for each gap |
| Reassessment | After evidence changes, not merely after time passes |
Use NIST's voluntary risk framework as supporting context for ongoing governance. This quiz is not a NIST assessment instrument.
Sources cited on this page
- NIST's voluntary risk frameworknist.gov