nerdexam
(ISC)2

CGRC · Question #325

FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that…

The correct answer is C. Level 3. In the Federal Information Technology Security Assessment Framework (FITSAF), Level 3 signifies that security procedures and controls have been fully implemented within the information system.

Implementation of Security and Privacy Controls

Question

FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls have been implemented? Response:

Options

  • ALevel 4
  • BLevel 1
  • CLevel 3
  • DLevel 5
  • ELevel 2

How the community answered

(47 responses)
  • A
    2% (1)
  • B
    6% (3)
  • C
    89% (42)
  • D
    2% (1)

Why each option

In the Federal Information Technology Security Assessment Framework (FITSAF), Level 3 signifies that security procedures and controls have been fully implemented within the information system.

ALevel 4

FITSAF Level 4 typically relates to testing the effectiveness of controls, not merely their implementation.

BLevel 1

FITSAF Level 1 usually represents the initial documentation or definition of security requirements, not active implementation.

CLevel 3Correct

FITSAF Level 3, 'Implemented,' indicates that the security controls and procedures are not just defined or documented, but have been actively put into practice within the information system and its environment. This level focuses on the operational existence and deployment of security measures.

DLevel 5

FITSAF Level 5 typically involves continuous monitoring, optimization, and integration, beyond just initial implementation.

ELevel 2

FITSAF Level 2 often pertains to the formalization or approval of security plans, preceding actual implementation.

Concept tested: FITSAF - Implementation levels

Topics

#FITSAF#Security Assessment Frameworks#Control Implementation#Compliance Levels

Community Discussion

No community discussion yet for this question.

Full CGRC Practice