CAP · Question #8
Which of the following professionals is responsible for starting the Certification & Accreditation (C&A) process?
The correct answer is D. Information system owner. The Information System Owner (ISO) is responsible for initiating the Certification & Accreditation (C&A) process. The ISO is the person accountable for the overall procurement, development, integration, modification, operation, maintenance, and retirement of the information syste
Question
Which of the following professionals is responsible for starting the Certification & Accreditation (C&A) process?
Options
- AAuthorizing Official
- BChief Risk Officer (CRO)
- CChief Information Officer (CIO)
- DInformation system owner
How the community answered
(37 responses)- A3% (1)
- B5% (2)
- C3% (1)
- D89% (33)
Explanation
The Information System Owner (ISO) is responsible for initiating the Certification & Accreditation (C&A) process. The ISO is the person accountable for the overall procurement, development, integration, modification, operation, maintenance, and retirement of the information system. The Authorizing Official (A) grants or denies the ATO at the end of the process. The CRO (B) manages enterprise-wide risk. The CIO (C) provides IT leadership and policy oversight but does not start individual system C&A processes. The ISO is the party who initiates the process by registering the system.
Topics
Community Discussion
No community discussion yet for this question.