CSSLP: Certified Secure Software Lifecycle Professional

Question

You are a security manager for BlueWell Inc. and are working through the NIST SP 800-37 C&A methodology, which is based on four well-defined phases. In which phase of the NIST SP 800-37 C&A methodology does security categorization take place?

Explanation

Security categorization takes place during the Initiation phase. It establishes the system’s impact level and provides the basis for selecting appropriate security controls before certification and accreditation activities begin.

CSSLP: Certified Secure Software Lifecycle Professional

AstroTutor

Notes

Readiness

QuestionQ83

Community Discussion