A certification target helps in the formation of a continuous certification framework by incorporating:

Question

Options

• ACSA STAR level 2 attestation.
• Bservice level objective and service qualitative objective.
• Cfrequency of evaluating security attributes.
• Dscope description and security attributes to be tested.

• A
  4% (1)
• B
  92% (24)
• D
  4% (1)

Explanation

A continuous certification framework requires ongoing, real-time assessment rather than a point-in-time audit. To enable this, the certification target must incorporate both service level objectives (SLOs - quantitative, measurable metrics like uptime percentages or response times) and service qualitative objectives (SQOs - descriptive criteria for security attributes). Together, SLOs and SQOs provide the measurable benchmarks needed to continuously evaluate whether the certification target maintains compliance over time. CSA STAR Level 2 attestation (A) is a certification artifact, not a framework formation component. Frequency of evaluation (C) and scope description (D) are components of the audit plan, not the certification target definition.

No community discussion yet for this question.