[Autogenerated] despite the fact the standard contains the requirement,
the testing procedure and the guidance.
Sometimes it's not always clear what that standard may mean
when you apply it to your environment,
and so I'm quickly going to look at the ways you can get
more help to interpret the standard.
And although this might be one of the shortest sections in the course,
it might actually be one of the most valuable to you because
surprisingly few people might use of all the resources that the
PC I SSC has produced in my experience.
If they have, it could have saved a lot of time and money on the PC SSC website.
There are lots of guys that have been produced a ZA resulting there is
special interest groups or by the council's working groups.
There are also a large number of frequently asked questions FAA Hughes produced,
which answer specific questions about the standard,
how is applied and how to interpreter in particular circumstances,
as well as the results on the PC I SSC website.
If you reach your favorite search engine,
you'll find lots of advice on blog's and question answer forums.
We confined opinions and answers to PC Idea says questions.
Let's start by looking at the PC I SSC website to find the guidance
documents we need to look in the document library,
the library defense, the listing, the key PC idea says documents.
You can see that as well as the standard itself.
There's the glossary,
which I referred to a number of times the prioritized
approach and the reporting compliance template.
But let's go back to the filter and pick guidance documents.
You see there are over 60 guidance documents produced by the PC SSC to help
keep dated secure and to build on the security standards.
The classifications listings.
No.
Awesome.
And so it's worth scrolling through to look at all the documents.
When we get to the PC idea, says General Section,
that's where you'll find most PC ideas s related documents.
For example,
here you can see the guidance for scoping a segmentation document
we just talked about in the previous module,
but scrolling down a bit further.
We also get to the really useful ___________ testing guidance,
which is really applicable to PC idea, Seth.
Okay, that's the guidance documents.
The FAA cues are linked from the main menu and you can
either browse f accused by categories.
So, for example, here are all the FAA cues relating to S a que CVT.
Or you can search for FAA cues about a particular subject.
So let's search for FAA cues related to compensating controls,
which would go to explore the next clip.
And and here you can see all the FAA cues that relate directly to come.
Saying controls or which mentioned compensating
controls is part of the FAA cues.
Answer.
Obviously clicking on the FAA Hughes title takes you the question on the answer.
One final quick tip is you been searched for F accused by the reference number.
So, for example,
if you're looking for F A Q number 1331 which I mentioned when we
talked about using the eligibility criteria,
an essay que When completely reporting complies,
you can just type the F A Q number into the search box now.
Occasionally,
you may have a difference of opinion with your assessor about how to interpret
the standard as it relates to your particular environment,
processes or technology.
When these differences of opinion occur.
Looking to the guidance,
the FAA queues often help you and your assessor come
to mutually agreeable compromise.
The PC I SSC does make it clear that the guidance documents
the FAA cues do not override the standard,
but they exist to help entities and assesses,
interpret and apply the standard.
Finally,
have a warning about PC I advice and concept you can find on the Internet.
You need to be really cautious about taking a particular opinion and applying
it to your environment because it might not be applicable.
PC I Jesse's has been out for over 14 years,
and the standard and technology has changed over time.
So what somebody wrote about the way of requirement should be interpreted,
saying 2012 may know they are all applicable today.
Also, I'm sure this won't come as a surprise.
You can't believe everything that you read on the Internet,
not all experts and gurus,
Oeiras expert or such gurus as they would like you to believe on.
The opinion of a random person on the Internet isn't like this way.
Your assessor now don't get me wrong.
There are places on the Internet where you'll find really helpful advice,
um, que essays and excuses about complying with standards.
But at the end of the day, remember,
it's your assessor looking at your environment who will make the final call,
interpret how the standard applies to you.
So let's find out about how Jacob and I both deal with differences of opinion.