Free Preparation Discussions
MENU
ISC2 CSSLP Exam - Topic 10 Question 20 Discussion
Topic #: 10
Which of the following phases of NIST SP 800-37 C&A methodology examines the residual risk for acceptability, and prepares the final security accreditation package?
The various phases of NIST SP 800-37 C&A are as follows:
Phase 1: Initiation- This phase includes preparation, notification and resource identification. It performs the security plan analysis,
update, and acceptance.
Phase 2: Security Certification- The Security certification phase evaluates the controls and documentation.
Phase 3: Security Accreditation- The security accreditation phase examines the residual risk for acceptability, and prepares the final
security accreditation package.
Phase 4: Continuous Monitoring-This phase monitors the configuration management and control, ongoing security control verification,
and status reporting and documentation.
Lizette
8 months agoTu
9 months agoDarci
9 months agoTheron
9 months agoDonte
9 months agoTawanna
9 months agoJanine
9 months agoMila
9 months agoGlenna
9 months agoShaniqua
9 months agoTaryn
9 months agoJose
9 months agoFrancesco
10 months ago