CSSLP · Question #119
Which of the following processes provides a standard set of activities, general tasks, and a management structure to certify and accredit systems, which maintain the information assurance and the…
The correct answer is B. NIACAP. The National Information Assurance Certification and Accreditation Process (NIACAP) provides a standard framework for the certification and accreditation of information systems.
Question
Which of the following processes provides a standard set of activities, general tasks, and a management structure to certify and accredit systems, which maintain the information assurance and the security posture of a system or site?
Options
- ANSA-IAM
- BNIACAP
- CASSET
- DDITSCAP
How the community answered
(42 responses)- A5% (2)
- B93% (39)
- C2% (1)
Why each option
The National Information Assurance Certification and Accreditation Process (NIACAP) provides a standard framework for the certification and accreditation of information systems.
NSA-IAM (Information Assurance Methodology) is a methodology developed by the NSA but not the specific broad C&A process defined by the question, which requires a standard set of activities and management structure.
NIACAP (National Information Assurance Certification and Accreditation Process) is a well-defined standard process for the certification and accreditation of information systems within the U.S. government, ensuring consistent application of security best practices and a managed security posture. It establishes a structured approach with defined activities, tasks, and roles to formally assess and approve systems.
ASSET (Automated Security Self-Evaluation Tool) is a tool designed to assist with security evaluations, not a complete certification and accreditation process itself.
DITSCAP (Defense Information Technology Security Certification and Accreditation Process) was a predecessor to NIACAP and was eventually superseded by other frameworks, making NIACAP a more current and historically accurate answer for a 'standard set of activities' for C&A at its time.
Concept tested: Certification and Accreditation processes
Topics
Community Discussion
No community discussion yet for this question.