CISSP-ISSEP: Information Systems Security Engineering Professional

Question

Which of the following documents did NIST develop for conducting Certification & Accreditation (C&A)? Each correct answer represents a complete solution.

Choose all that apply.

Choose five

Explanation

NIST C&A guidance covers system identification and security categorization (SP 800-59 and SP 800-60), security-control selection (SP 800-53), security-control assessment (SP 800-53A), and the certification and accreditation process (SP 800-37). SP 800-37A is not one of these NIST Special Publications.

Learn more

CISSP-ISSEP: Information Systems Security Engineering Professional

AstroTutor

Notes

Readiness

QuestionQ20

Community Discussion