Which of the following assessment methodologies defines a six-step technical security evaluation?

The correct answer is B. FIPS 102. FIPS 102 (B) - 'Guideline for Computer Security Certification and Accreditation' - defines a six-step technical security evaluation methodology for assessing and certifying computer systems. FITSAF (A) is the Federal IT Security Assessment Framework that uses a five-level…

Assessment/Audit of Security and Privacy Controls

Question

Options

AFITSAF
BFIPS 102
COCTAVE
DDITSCAP

How the community answered

(16 responses)

A
6% (1)
B
88% (14)
D
6% (1)

Explanation

FIPS 102 (B) - 'Guideline for Computer Security Certification and Accreditation' - defines a six-step technical security evaluation methodology for assessing and certifying computer systems. FITSAF (A) is the Federal IT Security Assessment Framework that uses a five-level maturity model. OCTAVE (C) is Operationally Critical Threat, Asset, and Vulnerability Evaluation, a risk-based strategic assessment methodology from Carnegie Mellon. DITSCAP (D) is the DoD IT Security Certification and Accreditation Process, a four-phase accreditation lifecycle - none of these define a six-step technical security evaluation.

Topics

#FIPS 102#Assessment Methodologies#Technical Security Evaluation#Certification and Accreditation (C&A)

Community Discussion

No community discussion yet for this question.

Full CAP Practice