CISSP-ISSEP · Question #7
What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. Develop DIACAP strategy. B. Initiate IA implementation plan. D. Assemble DIACAP team. E. Register system with DoD Component IA Program. F. Assign IA controls.. During the Initiate and Plan IA C&A phase of DIACAP, the subordinate tasks are all about laying the groundwork before any implementation begins: you register the system (E), assemble the team responsible for the effort (D), develop the overarching strategy (A), assign the applica
Question
What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process? Each correct answer represents a complete solution. Choose all that apply.
Options
- ADevelop DIACAP strategy.
- BInitiate IA implementation plan.
- CConduct validation activity.
- DAssemble DIACAP team.
- ERegister system with DoD Component IA Program.
- FAssign IA controls.
How the community answered
(38 responses)- A95% (36)
- C5% (2)
Explanation
During the Initiate and Plan IA C&A phase of DIACAP, the subordinate tasks are all about laying the groundwork before any implementation begins: you register the system (E), assemble the team responsible for the effort (D), develop the overarching strategy (A), assign the applicable IA controls (F), and initiate the implementation plan (B) - collectively, these five tasks represent the full planning and setup activities that must occur first.
Option C (Conduct validation activity) is incorrect because validation belongs to Phase 2: Implement and Validate Assigned IA Controls, which comes after the system has been set up and controls have been implemented - you cannot validate what hasn't been built yet.
Memory tip: Think of Phase 1 as the "READY" phase - Register, Assemble the team, Develop a strategy, assign controls, and kick off the Execution plan (implementation plan). Validation is a later-phase action that only makes sense once implementation is done, so if an answer mentions "validating" or "testing," it belongs in Phase 2, not Phase 1.
Topics
Community Discussion
No community discussion yet for this question.