nerdexam
(ISC)2

CAP · Question #212

Which of the following is used throughout the entire C&A process?

The correct answer is C. SSAA. The SSAA (System Security Authorization Agreement) is a living document used throughout the entire Certification and Accreditation (C&A) process under DITSCAP. It is initiated in Phase 1 and continuously updated across all four phases as the system evolves, security requirements

System Compliance

Question

Which of the following is used throughout the entire C&A process?

Options

  • ADAA
  • BDITSCAP
  • CSSAA
  • DDIACAP

How the community answered

(57 responses)
  • A
    4% (2)
  • C
    95% (54)
  • D
    2% (1)

Explanation

The SSAA (System Security Authorization Agreement) is a living document used throughout the entire Certification and Accreditation (C&A) process under DITSCAP. It is initiated in Phase 1 and continuously updated across all four phases as the system evolves, security requirements are verified, and accreditation decisions are made. The DAA (Designated Approving Authority) is a role, not a document; DITSCAP and DIACAP are frameworks, not documents used throughout the process in this sense.

Topics

#C&A Documentation#SSAA#DITSCAP#DIACAP

Community Discussion

No community discussion yet for this question.

Full CAP Practice