In which of the following phases does the change management process start?

The correct answer is C. Phase 4. In the DITSCAP framework, the change management process formally begins in Phase 4 (Post Accreditation). Once a system is accredited and operating, any subsequent changes to hardware, software, or configuration must go through a structured change management process to ensure the

Implementation of Security and Privacy Controls

Question

Options

APhase 2
BPhase 1
CPhase 4
DPhase 3

How the community answered

(48 responses)

A
2% (1)
B
8% (4)
C
85% (41)
D
4% (2)

Explanation

In the DITSCAP framework, the change management process formally begins in Phase 4 (Post Accreditation). Once a system is accredited and operating, any subsequent changes to hardware, software, or configuration must go through a structured change management process to ensure the accreditation remains valid. Phases 1–3 are focused on defining requirements, verifying security, and validating the system for the initial accreditation decision.

Topics

#RMF Phases#Change Management#Implementation Phase#NIST SP 800-37

Community Discussion

No community discussion yet for this question.

Full CAP Practice