CSSLP: Certified Secure Software Lifecycle Professional

Question

Numerous information-security standards encourage sound security practices and define frameworks or systems for organizing the analysis and design of information-security controls. Which of the following are U.S. Federal Government information-security standards? Each correct answer represents a complete solution. Choose all that apply.

Choose three

Explanation

NIST SP 800-53 organizes federal information-security controls into families that include IR (Incident Response), SA (System and Services Acquisition), and CA. The CA family’s terminology has evolved from certification and accreditation to assessment, authorization, and monitoring. “Information systems acquisition, development, and maintenance” is an ISO/IEC control-domain title rather than a U.S. federal NIST control-family title.

Learn more

NIST SP 800-53 Rev. 5, Security and Privacy Controls for Information Systems and Organizations

CSSLP: Certified Secure Software Lifecycle Professional

AstroTutor

Notes

Readiness

QuestionQ238

Community Discussion