Which of the following phases begins with a review of the SSAA in the DITSCAP accreditation?

The correct answer is C. Phase 3. DITSCAP (DoD Information Technology Security Certification and Accreditation Process) has four phases: Phase 1 (Definition), Phase 2 (Verification), Phase 3 (Validation), and Phase 4 (Post Accreditation). Phase 3 (Validation) begins with a review of the System Security Authorizat

System Compliance

Question

Options

APhase 1
BPhase 4
CPhase 3
DPhase 2

How the community answered

(33 responses)

A
3% (1)
B
3% (1)
C
88% (29)
D
6% (2)

Explanation

DITSCAP (DoD Information Technology Security Certification and Accreditation Process) has four phases: Phase 1 (Definition), Phase 2 (Verification), Phase 3 (Validation), and Phase 4 (Post Accreditation). Phase 3 (Validation) begins with a review of the System Security Authorization Agreement (SSAA) to confirm it accurately reflects the system's security posture before formal accreditation is granted. The SSAA is the central living document that evolves through all phases, but Phase 3 is specifically where its review initiates the validation activity.

Topics

#DITSCAP#SSAA#Accreditation Phases#System Security Authorization Agreement

Community Discussion

No community discussion yet for this question.

Full CAP Practice