New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSEP Exam - Topic 2 Question 59 Discussion

Actual exam question for ISC2's ISSEP exam
Question #: 59
Topic #: 2
[All ISSEP Questions]

System Authorization is the risk management process. System Authorization Plan (SAP) is a

comprehensive and uniform approach to the System Authorization Process. What are the different

phases of System Authorization Plan? Each correct answer represents a part of the solution. Choose

all that apply.

Show Suggested Answer Hide Answer
Suggested Answer: A, B, D, E

The creation of System Authorization Plan (SAP) is mandated by System Authorization. System

Authorization Plan (SAP) is a comprehensive

and uniform approach to the System Authorization Process. It consists of four phases:

Phase 1 - Pre-certification

Phase 2 - Certification

Phase 3 - Authorization

Phase 4 - Post-Authorization


Contribute your Thoughts:

0/2000 characters
Cristy
4 months ago
I thought Post-certification was the last step, not a phase.
upvoted 0 times
...
Jennie
4 months ago
Totally agree with you, Charlie!
upvoted 0 times
...
Novella
4 months ago
Wait, is Pre-certification really a phase? Sounds off.
upvoted 0 times
...
Charlie
4 months ago
I think Post-Authorization is also crucial!
upvoted 0 times
...
Rebbeca
4 months ago
Certification is definitely one of the phases.
upvoted 0 times
...
Matthew
5 months ago
I thought there were five phases, but I can't remember if Post-certification is one of them or if it's just Post-Authorization.
upvoted 0 times
...
Ronnie
5 months ago
I feel like Post-Authorization might be part of the process too, but I can't recall all the details right now.
upvoted 0 times
...
Dahlia
5 months ago
I remember practicing a question that mentioned Pre-certification as a phase, so I think that one is definitely correct.
upvoted 0 times
...
Marge
5 months ago
I think the phases include Certification and Authorization, but I'm not entirely sure about Post-certification.
upvoted 0 times
...
Daren
5 months ago
This question seems pretty straightforward. I'm pretty confident I know the answer - it's checking if a stop signal was sent from Orchestrator.
upvoted 0 times
...
Telma
5 months ago
Okay, I've got an idea. I think the parameter that influences both profile marking and scheduling priority is CIR. The Committed Information Rate sets the minimum guaranteed bandwidth, which would impact both how the queue is marked and its priority in the scheduler.
upvoted 0 times
...

Save Cancel