It is clear from the previous discussion that various characteristics or features of an assessment and reporting approach help define its level of assurance, i.e., the overall rely-ability of the assurances it provides. And since these features vary from one approach to another, one can evaluate different approaches in terms of specific indicators of rely-ability—such as the ability to tailor specified control requirements as shown in the figure below—that support one or more attributes along one or more dimensions of assurance.
Figure 15. Relationship of Features, Indicators, Attributes, and Dimensions
In this example, the assessment and reporting approach does not support tailoring of its control requirements, which limits the approach’s scalability to an organization (whether based on resources, specific risks, or similar constraints) and potentially its suitability (dependent on the needs of a particular relying party).