CSSLP: Certified Secure Software Lifecycle Professional

Question

You are a security engineer at BlueWell Inc. and want to use techniques and procedures to verify the effectiveness of security controls in a Federal Information System. Which of the following NIST documents will provide guidance?

Explanation

NIST SP 800-53A provides the methodology and assessment procedures for evaluating security and privacy controls in information systems and organizations, including verifying that controls are implemented, meet their objectives, and achieve the intended outcomes.

Learn more

NIST SP 800-53A Rev. 5: Assessing Security and Privacy Controls in Information Systems and Organizations

CSSLP: Certified Secure Software Lifecycle Professional

AstroTutor

Notes

Readiness

QuestionQ182

Community Discussion