nerdexam
(ISC)2

CSSLP · Question #119

Which of the following processes provides a standard set of activities, general tasks, and a management structure to certify and accredit systems, which maintain the information assurance and the…

The correct answer is B. NIACAP. The National Information Assurance Certification and Accreditation Process (NIACAP) provides a standard framework for the certification and accreditation of information systems.

Secure Software Deployment, Operations, Maintenance

Question

Which of the following processes provides a standard set of activities, general tasks, and a management structure to certify and accredit systems, which maintain the information assurance and the security posture of a system or site?

Options

  • ANSA-IAM
  • BNIACAP
  • CASSET
  • DDITSCAP

How the community answered

(42 responses)
  • A
    5% (2)
  • B
    93% (39)
  • C
    2% (1)

Why each option

The National Information Assurance Certification and Accreditation Process (NIACAP) provides a standard framework for the certification and accreditation of information systems.

ANSA-IAM

NSA-IAM (Information Assurance Methodology) is a methodology developed by the NSA but not the specific broad C&A process defined by the question, which requires a standard set of activities and management structure.

BNIACAPCorrect

NIACAP (National Information Assurance Certification and Accreditation Process) is a well-defined standard process for the certification and accreditation of information systems within the U.S. government, ensuring consistent application of security best practices and a managed security posture. It establishes a structured approach with defined activities, tasks, and roles to formally assess and approve systems.

CASSET

ASSET (Automated Security Self-Evaluation Tool) is a tool designed to assist with security evaluations, not a complete certification and accreditation process itself.

DDITSCAP

DITSCAP (Defense Information Technology Security Certification and Accreditation Process) was a predecessor to NIACAP and was eventually superseded by other frameworks, making NIACAP a more current and historically accurate answer for a 'standard set of activities' for C&A at its time.

Concept tested: Certification and Accreditation processes

Topics

#Certification and Accreditation (C&A)#NIACAP#Information Assurance#System Security Posture

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice