問題文
An agency has completed its self-assessment. Beyond producing a stage per pillar, what is the assessment meant to enable?
選択肢
- Producing the evidence an auditor needs, since the assessment is the model's compliance artifact and the stage per pillar is the figure the auditor will ask the agency to justify in writing.
- Establishing the order in which the products should be purchased, because the stage per pillar determines which capabilities are missing and the procurement sequence therefore follows directly from the assessment without further analysis by the procurement team.
- Identifying existing capabilities that support further maturity and gaps for prioritization, and planning for opportunities to coordinate capabilities across the pillars to enable granular least privilege access controls and mitigate additional risks.
- Determining which pillar to advance next, since the model prescribes advancing the least mature pillar first and then working upward through the others in the order their current stages happen to place them.