CISSP-ISSEP: Information Systems Security Engineering Professional

Question

Continuous Monitoring is the fourth phase in the security certification and accreditation process. Which activities are carried out during the Continuous Monitoring process? Each correct answer represents a complete solution. Choose all that apply.

Choose three

Explanation

The Continuous Monitoring Phase includes configuration management and control, ongoing security-control monitoring, analysis of the security impact of system changes, and status reporting and documentation. Security accreditation decisions and accreditation documentation are activities of the Security Accreditation Phase.

Learn more

NIST SP 800-37: Guide for the Security Certification and Accreditation of Federal Information Systems

CISSP-ISSEP: Information Systems Security Engineering Professional

AstroTutor

Notes

Readiness

QuestionQ212

Community Discussion