CISSP-ISSEP: Information Systems Security Engineering Professional

By ISC · Question Mode

QuestionQ93

VerifiedSecurity Planning and Engineering

You work as a security engineer for BlueWell Inc. In your view, which of the following DITSCAPNIACAP model phases takes place when the project begins, or during the initial C&A effort for a legacy system?

Explanation

The Definition phase initiates the DITSCAP certification and accreditation effort. It establishes the C&A level of effort, identifies the designated approving authority, and documents the security requirements needed for accreditation; verification and validation occur later, while post-accreditation applies after authorization.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!