nerdexam
(ISC)2

CISSP-ISSEP · Question #26

What are the subordinate tasks of the Implement and Validate Assigned IA Control phase in the DIACAP process? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is B. Combine validation results in DIACAP scorecard. C. Conduct validation activities. D. Execute and update IA implementation plan.. DIACAP's "Implement and Validate Assigned IA Controls" phase has three core subordinate tasks: executing and updating the IA implementation plan (D), conducting validation activities to test those controls (C), and combining validation results into the DIACAP scorecard (B) - all

Risk Management

Question

What are the subordinate tasks of the Implement and Validate Assigned IA Control phase in the DIACAP process? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AConduct activities related to the disposition of the system data and objects.
  • BCombine validation results in DIACAP scorecard.
  • CConduct validation activities.
  • DExecute and update IA implementation plan.

How the community answered

(37 responses)
  • A
    14% (5)
  • B
    86% (32)

Explanation

DIACAP's "Implement and Validate Assigned IA Controls" phase has three core subordinate tasks: executing and updating the IA implementation plan (D), conducting validation activities to test those controls (C), and combining validation results into the DIACAP scorecard (B) - all three form a logical sequence: implement → test → record results.

Why A is wrong: Disposing of system data and objects is a task belonging to the Decommission phase, which occurs at the end of a system's lifecycle - not during implementation and validation.

Memory tip: Think of the phase as a three-step loop - Do → Test → Score (Execute the plan, Conduct validation, Combine into scorecard). If an answer involves ending something (disposal/decommission), it belongs to the last DIACAP phase, not this one.

Topics

#DIACAP#IA Controls#Validation#Implementation

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSEP Practice