The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system has been accredited in Phase 3. What are the process activities of this phase? Each correct answer represe

Question

Options

• AMaintenance of the SSAA
• BCompliance validation
• CChange management
• DSystem operations
• ESecurity operations
• FContinue to review and refine the SSAA

• A
  95% (19)
• F
  5% (1)

Explanation

DITSCAP (DoD Information Technology Security Certification and Accreditation Process) has four phases. Phase 4 (Post Accreditation) begins after the Designated Approving Authority (DAA) grants accreditation and focuses on maintaining the security posture of the system throughout its operational life. The five recognized activities of Phase 4 are: (A) Maintenance of the SSAA - keeping the System Security Authorization Agreement current; (B) Compliance validation - ensuring the system continues to meet security requirements; (C) Change management - managing and assessing the security impact of changes; (D) System operations - the ongoing operation of the system; and (E) Security operations - ongoing security monitoring and incident response. Option F ('Continue to review and refine the SSAA') is a distractor - while SSAA maintenance is correct (Option A), the specific phrasing of Option F does not represent a distinct, separately defined activity of Phase 4 in the DITSCAP framework.

No community discussion yet for this question.