CSSLP · Question #73
The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system has been accredited in Phase 3. What are the process activities of this phase? Each correct answer…
The correct answer is A. Security operations B. Maintenance of the SSAA C. Compliance validation D. Change management E. System operations. The Post Accreditation phase (Phase 4) of DITSCAP involves ongoing activities to maintain the system's security posture and accreditation, including daily security and system operations, continuous compliance validation, managing changes, and maintaining the System Security…
Question
The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system has been accredited in Phase 3. What are the process activities of this phase? Each correct answer represents a complete solution. Choose all that apply.
Options
- ASecurity operations
- BMaintenance of the SSAA
- CCompliance validation
- DChange management
- ESystem operations
- FContinue to review and refine the SSAA
How the community answered
(35 responses)- A91% (32)
- F9% (3)
Why each option
The Post Accreditation phase (Phase 4) of DITSCAP involves ongoing activities to maintain the system's security posture and accreditation, including daily security and system operations, continuous compliance validation, managing changes, and maintaining the System Security Authorization Agreement (SSAA).
Security operations involve the day-to-day tasks of monitoring, incident response, and managing security controls to maintain an accredited system.
The System Security Authorization Agreement (SSAA) is a living document that must be continuously maintained and updated to reflect the current security posture.
Regular compliance validation ensures the system continues to adhere to security requirements and policies after accreditation.
Change management is crucial to securely handle any modifications to the system, ensuring they do not compromise the accreditation status.
System operations refer to the ongoing management and maintenance of the system itself, including its availability and performance aspects.
"Continue to review and refine the SSAA" is a detailed aspect of "Maintenance of the SSAA" (B), making B the more comprehensive and distinct activity for DITSCAP Phase 4.
Concept tested: DITSCAP Phase 4 - Post Accreditation activities
Source: https://www.acq.osd.mil/osbp/sbir/sb/documents/DOD_Instruction_5200.40.pdf
Topics
Community Discussion
No community discussion yet for this question.