Controls
Control population
How many distinct controls an assessment evaluated. Below a minimum no rating is issued, and an unusual figure is a signal worth reading.
What it is
The count of distinct controls the scanner evaluated and returned a classifiable result for.
The thresholds
| Figure | Meaning |
|---|---|
| Below 25 | The security domain is not rated at all |
| Roughly 150 to 400 | The range observed across live and fixture runs |
| Far outside that range | A signal that the scan did not do what it usually does |
Why it is published
An unusual population is the visible symptom of a permission gap, a narrowed region scope, or a scanner change. Publishing the count lets a reader notice for themselves, rather than reading a score that quietly rests on thirty controls.
How GovIntel applies it
Below the minimum, the domain reports as not assessed with the population stated. The observations are still printed.
What it does not mean
A large population is not better coverage of your estate. It is a property of the scanner's catalogue and the number of regions and resources it had to evaluate.