The Phase 2 of DITSCAP C&A is known as Verification. The goal of this phase is to obtain a fully integrated system for certification testing and accreditation. What are the process activities of…

The correct answer is A. Configuring refinement of the SSAA B. Assessment of the Analysis Results C. System development D. Certification analysis. DITSCAP (DoD IT Security Certification and Accreditation Process) Phase 2 is called Verification, and its goal is to obtain a fully integrated system ready for certification testing and accreditation. The process activities of Phase 2 include: (A) Configuring refinement of the…

Implementation of Security and Privacy Controls

Question

The Phase 2 of DITSCAP C&A is known as Verification. The goal of this phase is to obtain a fully integrated system for certification testing and accreditation. What are the process activities of this phase? Each correct answer represents a complete solution. Choose all that apply.

Options

AConfiguring refinement of the SSAA
BAssessment of the Analysis Results
CSystem development
DCertification analysis
ERegistration

How the community answered

(43 responses)

A
91% (39)
E
9% (4)

Explanation

DITSCAP (DoD IT Security Certification and Accreditation Process) Phase 2 is called Verification, and its goal is to obtain a fully integrated system ready for certification testing and accreditation. The process activities of Phase 2 include: (A) Configuring refinement of the SSAA (System Security Authorization Agreement), (B) Assessment of the Analysis Results, (C) System development, and (D) Certification analysis. Registration (E) is an activity that belongs to Phase 1 (Definition), where the system is formally registered and the initial SSAA is drafted. Therefore E is not a Phase 2 activity.

Topics

#DITSCAP#Certification and Accreditation (C&A)#System Development Life Cycle (SDLC)#Verification Phase

Community Discussion

No community discussion yet for this question.

Full CAP Practice