Reporting Methodology – Identifies which methods used by the assessor to collect the requisite evidence are to be reported in the ROC for each testing procedure. Note that the methods identified for inclusion in the ROC may not be all-inclusive of the methods used during an actual assessment. The assessor may need to perform additional methods during the assessment to reach a finding of ―in place‖ or ―not in place‖. Where additional methods are used to validate a finding, the assessor should also report those details in the ROC.