CISSP-ISSMP: Information Systems Security Management Professional

Deployment security work includes vulnerability assessment and penetration testing to identify weaknesses and validate the deployed software’s resistance to attack; security certification and accreditation to verify that safeguards are effective and authorize operation; and risk adjustments to address residual risk through appropriate mitigations, contingencies, or exceptions. NIST’s SDLC guidance likewise places certification and accreditation activities in the implementation/assessment stage.