The Insider’s Guide to Writing ESV and RBG Reports: Practical recommendations from a seasoned former reviewer’s perspective (N30c)
In the years leading to my recent retirement, I reviewed hundreds of entropy assessment reports (EARs). Despite seeing a wide variety of entropy sources, as well as report-writing approaches, I found that effective reports consistently exhibited the same characteristics. This talk distills those observations into concrete, actionable recommendations for writing SP 800-90B ESV EARs and the new SP 800-90C RBG reports, drawing directly from my experience as a reviewer.