CISSP-ISSEP: Information Systems Security Engineering Professional

By ISC · Question Mode

QuestionQ16

VerifiedRisk Management

Which of the following processes ends with an agreement among key stakeholders that a system, in its current configuration and operation, provides adequate protection controls?

Explanation

Certification and accreditation (C&A) assesses a system’s security controls and culminates in an authorization decision by responsible stakeholders that the system has adequate protection for operation in its current state.

Community Discussion

No comments yet. Be the first to start the discussion!