nerdexam
(ISC)2

CSSLP · Question #35

What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. Initiate IA implementation plan. B. Develop DIACAP strategy. C. Assign IA controls. D. Assemble DIACAP team. E. Register system with DoD Component IA Program.. This question asks to identify the specific subordinate tasks that comprise the 'Initiate and Plan IA C&A' phase of the DIACAP process.

Secure Software Lifecycle Management

Question

What are the subordinate tasks of the Initiate and Plan IA C&A phase of the DIACAP process? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AInitiate IA implementation plan.
  • BDevelop DIACAP strategy.
  • CAssign IA controls.
  • DAssemble DIACAP team.
  • ERegister system with DoD Component IA Program.
  • FConduct validation activity.

How the community answered

(21 responses)
  • A
    90% (19)
  • F
    10% (2)

Why each option

This question asks to identify the specific subordinate tasks that comprise the 'Initiate and Plan IA C&A' phase of the DIACAP process.

AInitiate IA implementation plan.Correct

Initiating the IA implementation plan involves developing a comprehensive strategy for how information assurance controls will be integrated and managed within the system, laying the groundwork for execution.

BDevelop DIACAP strategy.Correct

Developing the DIACAP strategy defines the scope, resources, and overall approach for the certification and accreditation process, ensuring alignment with organizational goals and requirements.

CAssign IA controls.Correct

Assigning IA controls involves selecting and tailoring the appropriate security controls from the DoD baseline, based on the system's mission criticality and data confidentiality requirements.

DAssemble DIACAP team.Correct

Assembling the DIACAP team designates the individuals with the necessary expertise and roles to carry out the certification and accreditation tasks throughout the entire process.

ERegister system with DoD Component IA Program.Correct

Registering the system with the DoD Component IA Program formally enrolls the system into the DIACAP lifecycle, ensuring it receives appropriate oversight and resources from the responsible component.

FConduct validation activity.

Conducting validation activity, which includes security testing and evaluation to confirm the effectiveness of implemented controls, is typically part of the 'Implement and Validate' phase, not the initial 'Initiate and Plan' phase of DIACAP.

Concept tested: DIACAP Initiate and Plan phase tasks

Source: https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/851001p.pdf

Topics

#DIACAP#Certification & Accreditation#Information Assurance#System Security Lifecycle

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice