Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation? Each correct answer represents a complete solution. Choose two.
Which of the following DITSCAP phases validates that the preceding work has produced an IS that operates in a specified computing environment?
Which of the following classification levels defines the information that, if disclosed to the unauthorized parties, could be reasonably expected to cause exceptionally grave damage to the national security?
Which of the following governance bodies provides management, operational and technical controls to satisfy security requirements?
Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?
