CISSP-ISSEP: Information Systems Security Engineering Professional

DIACAP is the DoD information-assurance certification and accreditation process that defines and manages residual risk—the portion of risk that remains after security controls or other mitigation measures have been applied. The ISSO and DAA are roles, while an SSAA is an agreement artifact rather than the process that supplies this definition.