Level I: High-Level assessment is a top-down look at policies, procedures and guidelines and does not include hands-on testing.
Things included in the scope of this level are things found by asking below questions
Things included in the scope of this level are things found by asking below questions
- Does the applicable policies exist?
- Are they being followed?
- Is there content sufficient to guard against potential risk?