CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ62

VerifiedSecure Software Lifecycle Management

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure used to evaluate, describe, test, and authorize systems before or after a system is operating. Which of the following statements are true about Certification and Accreditation? Each correct answer represents a complete solution.

Choose two
Explanation

Certification is the comprehensive assessment of an information system’s management, operational, and technical security controls. Accreditation is the official management decision by a senior agency official to authorize an information system’s operation, based on the implemented security controls and acceptance of the associated risk.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!