Which of the following individuals informs all C&A participants about life cycle actions, security requirements, and documented user needs?

The correct answer is A. IS program manager. The IS (Information System) Program Manager holds the overarching responsibility for the information system throughout its life cycle. This role is responsible for coordinating with all C&A participants - including the Certification Agent, DAA (Designated Approving Authority), an

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

AIS program manager
BCertification Agent
CUser representative
DDAA

How the community answered

(45 responses)

A
87% (39)
B
2% (1)
C
7% (3)
D
4% (2)

Explanation

The IS (Information System) Program Manager holds the overarching responsibility for the information system throughout its life cycle. This role is responsible for coordinating with all C&A participants - including the Certification Agent, DAA (Designated Approving Authority), and user representatives - to ensure everyone understands life cycle actions, security requirements, and documented user needs. The Certification Agent evaluates security controls. The User Representative advocates for end-user requirements but does not coordinate C&A-wide communications. The DAA (also called the Authorizing Official) grants or denies system authorization but does not fulfill the coordination/communication role described.

Topics

#IS Program Manager Roles#A&A Process#Security Requirements#System Lifecycle Management

Community Discussion

No community discussion yet for this question.

Full CAP Practice