The Interim Assessment (required at the 1-year mark during a 2-year r2 Certification period) ensures continued compliance. It does not retest all Requirement Statements from the initial assessment. Instead, it involves:
Testing all CAPs from the original validated assessment.
Confirming no significant changes occurred in the in-scope environment.
Testing a random sampling of Requirement Statements, as chosen by the MyCSF tool, to confirm continued adherence.
Completing assessor assertions to verify compliance status.
Extract Reference (CCSFP Study Guide, Interim Assessment Requirements [0046]):
Interim Assessments focus on testing CAPs, environmental change confirmation, assessor assertions, and a sample of Requirement Statements; full retesting of all controls is not required.