assessor

{
  "id": "MLC-T-CYB-000243",
  "term": "assessor",
  "field": "Cybersecurity",
  "definition": "1. The individual, group, or organization responsible for conducting a security or privacy control assessment.\n\n2. The individual, group, or organization responsible for conducting a risk assessment.\n\n3. The individual, group, or organization responsible for conducting a security control assessment.\n\n4. See Security Control Assessor.\n\n5. See Security Control Assessor or Privacy Control Assessor.\n\n6. The individual, group, or organization responsible for conducting a privacy control assessment.\n\n7. The individual responsible for conducting assessment activities under the guidance and direction of a Designated Authorizing Official. The Assessor is a 3rd party.\n\n8. The individual, group, or organization responsible for conducting a security or privacy assessment.\n\n9. See security control assessor or risk assessor.",
  "synonyms": [
    "Privacy Control Assessor",
    "risk assessor",
    "security control assessor"
  ],
  "see_also": [
    "control assessor"
  ],
  "references": [
    "NIST SP 800-53A Rev. 5; NIST SP 800-53 Rev. 5",
    "CNSSI 4009-2015 from NIST SP 800-30 Rev. 1; NIST SP 800-30 Rev. 1; NIST SP 800-37 Rev. 1 [Superseded] from NIST SP 800-30",
    "NIST SP 800-137 from NISTIR 7298; NIST SP 800-30 Rev. 1; NIST SP 800-37 Rev. 1 [Superseded]; NIST SP 800-39; NIST SP 800-53 Rev. 4 [Superseded]; NIST SP 800-53A Rev. 4 [Superseded]",
    "NIST SP 800-137; NIST SP 800-37 Rev. 1 [Superseded]; NIST SP 800-39; NIST SP 800-53 Rev. 4 [Superseded]; NIST SP 800-171 Rev. 2 [Superseded]; NIST SP 800-172 [Superseded]; NIST SP 800-171 Rev. 1 [Superseded]",
    "NIST SP 800-53A Rev. 4 [Superseded]",
    "NIST SP 800-79-2",
    "NIST SP 800-37 Rev. 2",
    "CNSSI 4009-2015 from NIST SP 800-30 Rev. 1; NIST SP 800-30 Rev. 1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/assessor/"
}