CISSP-ISSEP: Information Systems Security Engineering Professional

By ISC · Question Mode

QuestionQ110

VerifiedRisk Management

Certification and Accreditation (C&A or CnA) is a process for implementing information security. Which of the following gives the correct sequence of C&A phases in a DITSCAP assessment?

Explanation

DITSCAP proceeds through Definition, Verification, Validation, and Post Accreditation. Definition establishes the mission, environment, architecture, and security requirements; Verification evaluates the evolving or modified system against those agreed requirements; Validation assesses the fully integrated system; and Post Accreditation maintains the accepted residual-risk posture.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!