The Phase 1 of DITSCAP C&A is known as Definition Phase. The goal of this phase is to define the C&A level of effort, identify the main C&A roles and responsibilities, and create an agreement on the…

The correct answer is A. Registration B. Document mission need C. Negotiation. DITSCAP (DoD Information Technology Security Certification and Accreditation Process) Phase 1 - Definition - has three primary activities: (1) Registration: formally registering the system into the C&A process; (2) Document Mission Need: capturing the system's mission…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

The Phase 1 of DITSCAP C&A is known as Definition Phase. The goal of this phase is to define the C&A level of effort, identify the main C&A roles and responsibilities, and create an agreement on the method for implementing the security requirements. What are the process activities of this phase? Each correct answer represents a complete solution. Choose all that apply.

Options

ARegistration
BDocument mission need
CNegotiation
DInitial Certification Analysis

How the community answered

(36 responses)

A
94% (34)
D
6% (2)

Explanation

DITSCAP (DoD Information Technology Security Certification and Accreditation Process) Phase 1 - Definition - has three primary activities: (1) Registration: formally registering the system into the C&A process; (2) Document Mission Need: capturing the system's mission requirements and security needs; and (3) Negotiation: reaching agreement between the Program Manager and the Designated Approving Authority (DAA) on the security requirements and C&A approach. Initial Certification Analysis (D) belongs to Phase 2 (Verification), where the system is tested against the agreed-upon security requirements. Including D would be incorrect.

Topics

#DITSCAP#Certification and Accreditation (C&A)#Definition Phase#Process Activities

Community Discussion

No community discussion yet for this question.

Full CAP Practice