QuestionQ90

Secure Software Deployment, Operations, Maintenance

Which of the following require all general support systems and major applications to be fully certified and accredited before those systems and applications are placed into production? Each correct answer represents part of the solution. Choose all that apply.

Choose two
  • A NIST
  • B Office of Management and Budget (OMB)
  • C FIPS
  • D FISMA
Explanation

FISMA establishes the federal information-security program requirement, and OMB policy implements it by requiring authorization to process for general support systems and major applications before processing begins. In the historical certification-and-accreditation terminology, the written authorization is accreditation, supported by certification. NIST provides guidance, and FIPS publishes technical standards, rather than imposing this authorization requirement.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!