CGRC · Question #69
According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among…
The correct answer is A. VI Vulnerability and Incident Management B. DC Security Design & Configuration C. EC Enclave and Computing Environment. DoD Instruction 8500.2 defines specific Information Assurance (IA) areas, and Vulnerability and Incident Management (VI), Security Design & Configuration (DC), and Enclave and Computing Environment (EC) are among these commonly referenced areas.
Question
According to U.S. Department of Defense (DoD) Instruction 8500.2, there are eight Information Assurance (IA) areas, and the controls are referred to as IA controls. Which of the following are among the eight areas of IA defined by DoD? Each correct answer represents a complete solution. Choose all that apply. Response:
Options
- AVI Vulnerability and Incident Management
- BDC Security Design & Configuration
- CEC Enclave and Computing Environment
- DInformation systems acquisition, development, and maintenance
How the community answered
(62 responses)- A94% (58)
- D6% (4)
Why each option
DoD Instruction 8500.2 defines specific Information Assurance (IA) areas, and Vulnerability and Incident Management (VI), Security Design & Configuration (DC), and Enclave and Computing Environment (EC) are among these commonly referenced areas.
Vulnerability and Incident Management (VI) is recognized as an Information Assurance (IA) area in some interpretations and training materials derived from DoD Instruction 8500.2, focusing on identifying, analyzing, and mitigating system vulnerabilities and responding to security incidents.
Security Design & Configuration (DC) is another IA area, encompassing the secure architectural design and proper configuration of information systems to protect data and resources, as often taught in relation to DoD 8500.2.
Enclave and Computing Environment (EC) is also recognized as an IA area in common educational contexts for DoD 8500.2, dealing with the security of the computing infrastructure and logical boundaries that protect information systems.
While 'Information systems acquisition, development, and maintenance' are crucial activities requiring security considerations, this specific phrase is not one of the designated two-letter acronym IA areas or functional areas as explicitly enumerated in common lists associated with DoD Instruction 8500.2.
Concept tested: DoD Information Assurance (IA) areas (per 8500.2)
Topics
Community Discussion
No community discussion yet for this question.