CAP · Question #104
The National Information Assurance Certification and Accreditation Process (NIACAP) is the minimum standard process for the certification and accreditation of computer and telecommunications systems…
The correct answer is B. Designated Approving Authority C. IS program manager D. User representative E. Certification agent. NIACAP defines four required participants in a security assessment: the Designated Approving Authority (DAA) (B), who has the authority to formally accept the residual risk; the IS Program Manager (C), who oversees the system's development and acquisition; the User…
Question
The National Information Assurance Certification and Accreditation Process (NIACAP) is the minimum standard process for the certification and accreditation of computer and telecommunications systems that handle U.S. national security information. Which of the following participants are required in a NIACAP security assessment? Each correct answer represents a part of the solution. Choose all that apply.
Options
- AInformation Assurance Manager
- BDesignated Approving Authority
- CIS program manager
- DUser representative
- ECertification agent
How the community answered
(60 responses)- A5% (3)
- B95% (57)
Explanation
NIACAP defines four required participants in a security assessment: the Designated Approving Authority (DAA) (B), who has the authority to formally accept the residual risk; the IS Program Manager (C), who oversees the system's development and acquisition; the User Representative (D), who represents the operational and security interests of end users; and the Certification Agent (E), who conducts the technical evaluation of the system. The Information Assurance Manager (A) is a role more formally defined in DIACAP (the successor framework), not a required NIACAP participant. NIACAP's four required roles are specifically DAA, IS Program Manager, User Representative, and Certification Agent.
Topics
Community Discussion
No community discussion yet for this question.