nerdexam
(ISC)2

CGRC · Question #339

What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process? Each correct answer represents a complete solution. Choose all that apply. Response:

The correct answer is A. Develop DIACAP strategy. B. Assign IA controls. C. Assemble DIACAP team. D. Initiate IA implementation plan. E. Register system with DoD Component IA Program. The Initiate and Plan IA C&A phase of the DIACAP process involves several key subordinate tasks, including developing the DIACAP strategy, assigning IA controls, assembling the DIACAP team, initiating the IA implementation plan, and registering the system with the DoD Component…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process? Each correct answer represents a complete solution. Choose all that apply. Response:

Options

  • ADevelop DIACAP strategy.
  • BAssign IA controls.
  • CAssemble DIACAP team.
  • DInitiate IA implementation plan.
  • ERegister system with DoD Component IA Program.
  • FConduct validation activity.

How the community answered

(48 responses)
  • A
    90% (43)
  • F
    10% (5)

Why each option

The Initiate and Plan IA C&A phase of the DIACAP process involves several key subordinate tasks, including developing the DIACAP strategy, assigning IA controls, assembling the DIACAP team, initiating the IA implementation plan, and registering the system with the DoD Component IA Program.

ADevelop DIACAP strategy.Correct

Developing the DIACAP strategy is a core planning activity within the "Initiate and Plan IA C&A" phase, setting the overall approach for the C&A effort.

BAssign IA controls.Correct

Assigning IA controls, which involves identifying and mapping controls to the system, is a critical planning task within the "Initiate and Plan IA C&A" phase to ensure appropriate security measures are considered.

CAssemble DIACAP team.Correct

Assembling the DIACAP team is an essential initial step in the "Initiate and Plan IA C&A" phase, bringing together the necessary personnel and expertise to execute the certification and accreditation process.

DInitiate IA implementation plan.Correct

Initiating the IA implementation plan is a planning task in the "Initiate and Plan IA C&A" phase, laying the groundwork for how the chosen information assurance controls will be put into practice.

ERegister system with DoD Component IA Program.Correct

Registering the system with the DoD Component IA Program is a fundamental prerequisite and an initial task in the "Initiate and Plan IA C&A" phase, formally bringing the system under the C&A purview.

FConduct validation activity.

Conducting validation activity, such as security testing and evaluation, is typically performed during the "Assess IA Controls" phase (Phase 3) of DIACAP, not the initial "Initiate and Plan" phase.

Concept tested: DIACAP Initiate and Plan phase tasks

Topics

#DIACAP#Certification and Accreditation (C&A)#Initiate and Plan Phase#Information Assurance (IA)

Community Discussion

No community discussion yet for this question.

Full CGRC Practice