CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ45

VerifiedSecure Software Deployment, Operations, Maintenance

Phase 4 of DITSCAP C&A is called Post Accreditation. This phase begins after the system has been accredited in Phase 3. What are this phase’s process activities? Each correct answer represents a complete solution. Choose all that apply.

Choose five
Explanation

DITSCAP Post Accreditation activities maintain the accredited system’s acceptable residual risk during operation. They include security operations, maintenance of the SSAA, compliance validation, change management, and system operations. Reviewing and refining the SSAA is associated with the Validation phase; Post Accreditation performs ongoing SSAA maintenance.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!