CGRC · Question #519
DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December 1997. What phases…
The correct answer is C. System Definition D. Verification E. Validation F. Re-Accreditation. The DIACAP (Department of Defense Information Assurance Certification and Accreditation Process) identifies several key phases for managing the security posture of DoD systems.
Question
DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December 1997. What phases are identified by DIACAP? Each correct answer represents a complete solution. Choose all that apply. Response:
Options
- AAccreditation
- BIdentification
- CSystem Definition
- DVerification
- EValidation
- FRe-Accreditation
How the community answered
(41 responses)- A10% (4)
- B5% (2)
- C85% (35)
Why each option
The DIACAP (Department of Defense Information Assurance Certification and Accreditation Process) identifies several key phases for managing the security posture of DoD systems.
While 'Accreditation' is the final decision and a key outcome, the specific 'Make Accreditation Decision' is the name of the fourth phase, not simply 'Accreditation' as a standalone phase name.
'Identification' is a general activity within the DIACAP process but not one of its five formally named phases.
'System Definition' is a DIACAP phase where the system's mission, criticality, and environment are established, typically within the 'Initiate and Register System' phase.
'Verification' aligns with the 'Implement and Validate IA Controls' phase of DIACAP, where the effectiveness of security controls is assessed.
'Validation' corresponds to the 'Make Certification Determination' phase, where a formal assessment of system compliance is made.
'Re-Accreditation' aligns with the 'Maintain Authorization to Operate' phase, focusing on ongoing monitoring and periodic re-evaluation to ensure continued system authorization.
Concept tested: DIACAP Phases
Source: https://www.dau.edu/tools/t/Downloadable%20Files/Cybersecurity%20and%20Acquisition%20Courseware/DAU%20CYBER%20CERT%20%20(DIACAP%205%20Phases).pdf
Topics
Community Discussion
No community discussion yet for this question.