CISSP-ISSEP: Information Systems Security Engineering Professional

By ISC · Question Mode

QuestionQ29

VerifiedSecurity Planning and Engineering

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems before or after a system is in operation.

Which of the following statements are true about Certification and Accreditation? Each correct answer represents a complete solution.

Choose two
Explanation

Certification is the comprehensive assessment of an information system’s management, operational, and technical security controls. Accreditation is the official management decision by a senior agency official to authorize operation of the system, based on the implemented controls and acceptance of risk.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!