nerdexam
(ISC)2

CAP · Question #204

In which of the following phases does the SSAA maintenance take place?

The correct answer is A. Phase 4. Under the DITSCAP (Department of Defense Information Technology Security Certification and Accreditation Process) framework, Phase 4 is the Post Accreditation phase. This is where the System Security Authorization Agreement (SSAA) is maintained and updated to reflect changes to…

Compliance Maintenance

Question

In which of the following phases does the SSAA maintenance take place?

Options

  • APhase 4
  • BPhase 2
  • CPhase 1
  • DPhase 3

How the community answered

(28 responses)
  • A
    89% (25)
  • B
    7% (2)
  • C
    4% (1)

Explanation

Under the DITSCAP (Department of Defense Information Technology Security Certification and Accreditation Process) framework, Phase 4 is the Post Accreditation phase. This is where the System Security Authorization Agreement (SSAA) is maintained and updated to reflect changes to the system over its operational life. Phase 1 is Definition, Phase 2 is Verification, and Phase 3 is Validation. Ongoing maintenance and operations, including SSAA upkeep, belong to Phase 4.

Topics

#SSAA#Authorization process#Maintenance phase#Compliance

Community Discussion

No community discussion yet for this question.

Full CAP Practice