Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system?

The correct answer is A. TCSEC. TCSEC (A) - the Trusted Computer System Evaluation Criteria, also known as the 'Orange Book' - was developed by the U.S. Department of Defense and establishes baseline requirements for evaluating the effectiveness of security controls in computer systems. It defines…

Assessment/Audit of Security and Privacy Controls

Question

Options

ATCSEC
BFIPS
CSSAA
DFITSAF

How the community answered

(27 responses)

A
93% (25)
B
4% (1)
C
4% (1)

Explanation

TCSEC (A) - the Trusted Computer System Evaluation Criteria, also known as the 'Orange Book' - was developed by the U.S. Department of Defense and establishes baseline requirements for evaluating the effectiveness of security controls in computer systems. It defines classification levels (D through A1). FIPS (B) are Federal Information Processing Standards - broader standards. SSAA (C) is the System Security Authorization Agreement used in DITSCAP. FITSAF (D) is the Federal IT Security Assessment Framework, not a system security evaluation standard.

Topics

#TCSEC#Security Control Assessment#Evaluation Standards

Community Discussion

No community discussion yet for this question.

Full CAP Practice