Which of the following assessment methodologies defines a six-step technical security evaluation?

The correct answer is D. FIPS 102. FIPS 102 (Federal Information Processing Standard 102), titled 'Guideline for Computer Security Certification and Accreditation,' defines a six-step technical security evaluation methodology. OCTAVE (Operationally Critical Threat, Asset, and Vulnerability Evaluation) is a…

Assessment/Audit of Security and Privacy Controls

Question

Options

AOCTAVE
BFITSAF
CDITSCAP
DFIPS 102

How the community answered

(27 responses)

A
4% (1)
B
7% (2)
C
4% (1)
D
85% (23)

Explanation

FIPS 102 (Federal Information Processing Standard 102), titled 'Guideline for Computer Security Certification and Accreditation,' defines a six-step technical security evaluation methodology. OCTAVE (Operationally Critical Threat, Asset, and Vulnerability Evaluation) is a risk-based strategic assessment framework, not a six-step technical evaluation. FITSAF (Federal IT Security Assessment Framework) uses a five-level maturity model. DITSCAP (DoD IT Security Certification and Accreditation Process) follows a four-phase process. Only FIPS 102 specifically prescribes the six-step technical security evaluation.

Topics

#Security Evaluation#Assessment Methodologies#FIPS 102#Certification and Accreditation (C&A)

Community Discussion

No community discussion yet for this question.

Full CAP Practice