ISC2 CAP Exam - Topic 5 Question 43 Discussion
Certification and Accreditation (C&A or CnA ) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation?Each correct answer represents a complete solution. Choose two.
A) Accreditation is the official management decision given by a senior agency official to authorize operation of an information system. and B) Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.
C) Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.
D) Certification is the official management decision given by a senior agency official to authorize operation of an information system.
Carey
8 months agoWhitley
9 months agoLorean
9 months agoVicente
9 months agoLynelle
9 months agoLizette
9 months agoRikki
9 months agoTalia
9 months agoRene
9 months agoSean
9 months agoEleni
10 months ago