CISSP-ISSEP: Information Systems Security Engineering Professional

By ISC · Question Mode

QuestionQ175

VerifiedRisk Management

Which DITSCAP/NIACAP model phase is used to present the required evidence supporting the DAA during the accreditation process and results in an Approval To Operate (ATO)?

Explanation

The Validation phase confirms that the fully integrated system complies with its security requirements and concludes with system accreditation, including approval to operate. The resulting evidence supports the Designated Approving Authority’s risk-based authorization decision.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!