13.5.1 During the planning phase of a validated assessment effort, the External Assessor must prepare a Test Plan which outlines the anticipated testing of all in-scope requirement statements and serves as the blueprint for the performance of the validated assessment. For detailed requirements on the Test Plan, see Chapter 11 Testing & Evidence Requirements.

13.5.2 The Test Plan must be uploaded to MyCSF by the External Assessor during the Performing Validation phase of the assessment workflow.

An Excel-based Test Plan template is available for use by External Assessors performing i1 or e1 validated assessments. This template can be downloaded from the Test Plan upload page in MyCSF. The use of the template is not required. (The template is not currently available for r2 validated assessments due to the ability to tailor r2 requirements based on the Assessed Entity’s factor responses.)

NOTE: The Test Plan template is not available within assessments for Assessed Entities with Report-Only access to MyCSF. For such assessments, the External Assessor must manually build its Test Plan.