CSSLP · Question #154
DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December 1997. What phases…
The correct answer is A. System Definition B. Validation E. Verification F. Re-Accreditation. The DIACAP (Department of Defense Information Assurance Certification and Accreditation Process) framework includes phases such as System Definition, Validation, Verification, and Re-Accreditation to manage the security lifecycle of DoD systems.
Question
DIACAP applies to the acquisition, operation, and sustainment of any DoD system that collects, stores, transmits, or processes unclassified or classified information since December 1997. What phases are identified by DIACAP? Each correct answer represents a complete solution. Choose all that apply.
Options
- ASystem Definition
- BValidation
- CIdentification
- DAccreditation
- EVerification
- FRe-Accreditation
How the community answered
(46 responses)- A91% (42)
- C7% (3)
- D2% (1)
Why each option
The DIACAP (Department of Defense Information Assurance Certification and Accreditation Process) framework includes phases such as System Definition, Validation, Verification, and Re-Accreditation to manage the security lifecycle of DoD systems.
"System Definition" is the primary activity of DIACAP Phase 1, "Initiate and Plan IA C&A," where the system's mission, boundaries, and characteristics are established.
"Validation" is a key activity within DIACAP Phase 2, "Implement and Validate IA Controls," where security requirements are reviewed to ensure they are appropriate and meet the system's needs.
"Identification" is a general security activity but is not recognized as one of the formal phases of the DIACAP framework.
"Accreditation" is the final decision to authorize a system to operate, occurring after the "Make Certification Determination and Accreditation Decision" phase, rather than being a phase itself.
"Verification" is also part of DIACAP Phase 2, "Implement and Validate IA Controls," involving the assessment and testing of security controls to confirm their proper implementation and effectiveness.
"Re-Accreditation" is an essential aspect of DIACAP Phase 4, "Maintain IA Posture," ensuring that systems continuously meet security requirements throughout their lifecycle through periodic reviews and updates.
Concept tested: DIACAP lifecycle activities
Source: https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/851001p.pdf
Topics
Community Discussion
No community discussion yet for this question.