CISSP-ISSEP: Information Systems Security Engineering Professional

By ISC · Question Mode

QuestionQ17

VerifiedSecure Operations, Change Management and Disposal

Phase 4 of DITSCAP C&A is called Post Accreditation. This phase begins after the system has been accredited in Phase 3. What are this phase’s process activities? Each correct answer represents a complete solution. Choose all that apply.

Choose five
Explanation

Post Accreditation sustains the accredited system’s acceptable residual risk through system operations, security operations, ongoing maintenance of the System Security Authorization Agreement (SSAA), change/configuration management, and compliance validation. These are the continuing operational and assurance activities after accreditation.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!