CSSLP: Certified Secure Software Lifecycle Professional

Question

Which phase of the NIST SP 800-37 C&A methodology evaluates residual risk for acceptability and prepares the final security accreditation package?

Explanation

The Security Accreditation phase determines whether the residual risk is acceptable to the authorizing official and concludes with the final security accreditation documentation/package, including the accreditation decision letter.

Learn more

NIST SP 800-37: Guide for the Security Certification and Accreditation of Federal Information Systems

CSSLP: Certified Secure Software Lifecycle Professional

AstroTutor

Notes

Readiness

QuestionQ239

Community Discussion