Why does ASSET have business rules?
Business rules are essential when aggregating the completed system assessments. These business rules are discussed in the ASSET User Manual. One business rule is that the effectiveness level for each question must be selected in ascending order, i.e., procedures (level 2) must be checked before implemented (level 3), etc. This business rule is one of the requirements contained in NIST Special Publication 800-26. The software only enforces this requirement.