CISSP-ISSEP: Information Systems Security Engineering Professional

Question

Which phase of the NIST SP 800-37 C&A methodology evaluates residual risk for acceptability and prepares the final security accreditation package?

Explanation

The Security Accreditation phase determines whether residual risk is acceptable to the authorizing official and concludes with the final security accreditation documentation/package, including the accreditation decision.

Learn more

NIST SP 800-37: Guide for the Security Certification and Accreditation of Federal Information Systems

CISSP-ISSEP: Information Systems Security Engineering Professional

AstroTutor

Notes

Readiness

QuestionQ133

Community Discussion