The IAM/CA makes certification accreditation recommendations to the DAA. The DAA issues accreditation determinations. Which of the following are the accreditation determinations issued by the DAA?…

The correct answer is A. IATO B. ATO C. IATT E. DATO. Under the DIACAP (DoD Information Assurance Certification and Accreditation Process) framework, the Designated Approving Authority (DAA) can issue four official accreditation determinations: (A) IATO – Interim Authorization to Operate, granted when a system is not yet fully…

System Compliance

Question

The IAM/CA makes certification accreditation recommendations to the DAA. The DAA issues accreditation determinations. Which of the following are the accreditation determinations issued by the DAA? Each correct answer represents a complete solution. Choose all that apply.

Options

AIATO
BATO
CIATT
DATT
EDATO

How the community answered

(27 responses)

A
93% (25)
D
7% (2)

Explanation

Under the DIACAP (DoD Information Assurance Certification and Accreditation Process) framework, the Designated Approving Authority (DAA) can issue four official accreditation determinations: (A) IATO – Interim Authorization to Operate, granted when a system is not yet fully compliant but operational need exists with acceptable risk; (B) ATO – Authorization to Operate, the full approval granted when a system meets all security requirements; (C) IATT – Interim Authorization to Test, allowing a system to be tested in a live environment before full accreditation; and (E) DATO – Denial of Authorization to Operate, issued when risks are unacceptable. Option D, 'ATT' (Authorization to Test), is not a recognized standard DAA accreditation determination and is therefore excluded.

Topics

#Authorization to Operate (ATO)#RMF (Risk Management Framework)#Accreditation determinations#DAA (Designated Approving Authority)

Community Discussion

No community discussion yet for this question.

Full CAP Practice