QuestionQ34

VerifiedSecure Software Lifecycle Management

Phase 1 of DITSCAP C&A is called the Definition Phase. Its objective is to define the C&A level of effort, identify the primary C&A roles and responsibilities, and establish agreement on the approach for implementing the security requirements.

What are the process activities for this phase? Each correct answer represents a complete solution. Choose all that apply.

Choose three
Explanation

The DITSCAP Definition Phase consists of documenting the mission need, registering the system and its C&A effort, and negotiating the System Security Authorization Agreement approach, scope, responsibilities, and resources. Certification analysis is performed during Phase 2, Verification.

Community Discussion

No comments yet. Be the first to start the discussion!