CGRC · Question #325
FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that…
The correct answer is C. Level 3. In the Federal Information Technology Security Assessment Framework (FITSAF), Level 3 signifies that security procedures and controls have been fully implemented within the information system.
Question
FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls have been implemented? Response:
Options
- ALevel 4
- BLevel 1
- CLevel 3
- DLevel 5
- ELevel 2
How the community answered
(47 responses)- A2% (1)
- B6% (3)
- C89% (42)
- D2% (1)
Why each option
In the Federal Information Technology Security Assessment Framework (FITSAF), Level 3 signifies that security procedures and controls have been fully implemented within the information system.
FITSAF Level 4 typically relates to testing the effectiveness of controls, not merely their implementation.
FITSAF Level 1 usually represents the initial documentation or definition of security requirements, not active implementation.
FITSAF Level 3, 'Implemented,' indicates that the security controls and procedures are not just defined or documented, but have been actively put into practice within the information system and its environment. This level focuses on the operational existence and deployment of security measures.
FITSAF Level 5 typically involves continuous monitoring, optimization, and integration, beyond just initial implementation.
FITSAF Level 2 often pertains to the formalization or approval of security plans, preceding actual implementation.
Concept tested: FITSAF - Implementation levels
Topics
Community Discussion
No community discussion yet for this question.