DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December 1997. What phases…

The correct answer is A. Validation B. Re-Accreditation C. Verification D. System Definition. DIACAP (DoD Information Assurance Certification and Accreditation Process) defines five phases for managing IA throughout a system's lifecycle: (1) System Definition - establishing the IA strategy; (2) Verification - implementing and validating assigned IA controls; (3)…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December 1997. What phases are identified by DIACAP? Each correct answer represents a complete solution. Choose all that apply.

Options

AValidation
BRe-Accreditation
CVerification
DSystem Definition
EIdentification
FAccreditation

How the community answered

(37 responses)

A
92% (34)
E
5% (2)
F
3% (1)

Explanation

DIACAP (DoD Information Assurance Certification and Accreditation Process) defines five phases for managing IA throughout a system's lifecycle: (1) System Definition - establishing the IA strategy; (2) Verification - implementing and validating assigned IA controls; (3) Validation - making the certification determination and accreditation decision; (4) Re-Accreditation - maintaining the Authority to Operate (ATO) and conducting periodic reviews; and (5) Decommission (not listed among the choices). 'Identification' (E) and 'Accreditation' (F) are not named phases in DIACAP - the accreditation decision occurs within the Validation phase, not as a separate named phase.

Topics

#DIACAP#Certification and Accreditation#DoD Systems#Compliance Lifecycle

Community Discussion

No community discussion yet for this question.

Full CAP Practice