CAP · Question #212
Which of the following is used throughout the entire C&A process?
The correct answer is C. SSAA. The SSAA (System Security Authorization Agreement) is a living document used throughout the entire Certification and Accreditation (C&A) process under DITSCAP. It is initiated in Phase 1 and continuously updated across all four phases as the system evolves, security requirements
Question
Which of the following is used throughout the entire C&A process?
Options
- ADAA
- BDITSCAP
- CSSAA
- DDIACAP
How the community answered
(57 responses)- A4% (2)
- C95% (54)
- D2% (1)
Explanation
The SSAA (System Security Authorization Agreement) is a living document used throughout the entire Certification and Accreditation (C&A) process under DITSCAP. It is initiated in Phase 1 and continuously updated across all four phases as the system evolves, security requirements are verified, and accreditation decisions are made. The DAA (Designated Approving Authority) is a role, not a document; DITSCAP and DIACAP are frameworks, not documents used throughout the process in this sense.
Topics
Community Discussion
No community discussion yet for this question.