QuestionQ192

VerifiedSecure Software Lifecycle Management

Which of the following documents did NIST develop for conducting Certification & Accreditation (C&A)? Each correct answer represents a complete solution. Choose all that apply.

Choose five
Explanation

NIST’s C&A guidance suite includes publications for identifying national security systems (SP 800-59), categorizing information and systems (SP 800-60), conducting security certification and accreditation (SP 800-37), selecting security controls (SP 800-53), and assessing those controls (SP 800-53A). There is no NIST SP 800-37A publication.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!