SSCP · Question #1240
Accreditation grants permission to operate a system freely since all risk has been eliminated.
The correct answer is B. False. Accreditation does not eliminate all risk or grant permission to operate a system freely; instead, it formally authorizes system operation after risks have been identified, assessed, and deemed acceptable.
Question
Accreditation grants permission to operate a system freely since all risk has been eliminated.
Options
- ATrue
- BFalse
How the community answered
(65 responses)- A8% (5)
- B92% (60)
Why each option
Accreditation does not eliminate all risk or grant permission to operate a system freely; instead, it formally authorizes system operation after risks have been identified, assessed, and deemed acceptable.
Accreditation is a risk management decision that grants formal approval to operate, but it does not imply that all risks have been eliminated; residual risks always exist, and accreditation signifies they are within an acceptable level.
This statement is false because accreditation, in the context of IT security, is a formal authorization to operate a system after a comprehensive security assessment has determined that the risks are acceptable, not eliminated. It acknowledges that some residual risk will always remain.
Concept tested: System accreditation and risk management
Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-fedramp
Topics
Community Discussion
No community discussion yet for this question.