CAP · Question #133
The Phase 3 of DITSCAP C&A is known as Validation. The goal of Phase 3 is to validate that the preceding work has produced an IS that operates in a specified computing environment. What are the…
The correct answer is A. Perform certification evaluation of the integrated system C. Certification and accreditation decision D. Develop recommendation to the DAA E. Continue to review and refine the SSAA. DITSCAP (DoD Information Technology Security Certification and Accreditation Process) Phase 3 (Validation) focuses on confirming that the system meets its security requirements. Its activities include: (A) performing certification evaluation of the integrated system, (C) making…
Question
The Phase 3 of DITSCAP C&A is known as Validation. The goal of Phase 3 is to validate that the preceding work has produced an IS that operates in a specified computing environment. What are the process activities of this phase? Each correct answer represents a complete solution. Choose all that apply.
Options
- APerform certification evaluation of the integrated system
- BSystem development
- CCertification and accreditation decision
- DDevelop recommendation to the DAA
- EContinue to review and refine the SSAA
How the community answered
(37 responses)- A95% (35)
- B5% (2)
Explanation
DITSCAP (DoD Information Technology Security Certification and Accreditation Process) Phase 3 (Validation) focuses on confirming that the system meets its security requirements. Its activities include: (A) performing certification evaluation of the integrated system, (C) making the certification and accreditation decision, (D) developing a recommendation to the Designated Approving Authority (DAA), and (E) continuing to review and refine the SSAA (System Security Authorization Agreement). Option B, System Development, belongs to Phase 2 (Verification), not Phase 3.
Topics
Community Discussion
No community discussion yet for this question.