ISC2 ISSEP Exam - Topic 4 Question 14 Discussion

The Concept of Operations (CONOPS) is a document describing the characteristics of a proposed

system from the viewpoint of an individual

who will use that system. It is used to communicate the quantitative and qualitative system

characteristics to all stakeholders. CONOPS are

widely used in the military or in government services, as well as other fields.

A CONOPS generally evolves from a concept and is a description of how a set of capabilities may be

employed to achieve desired objectives or

a particular end state for a specific scenario.

Answer option A is incorrect. The IMM is the source document describing the customer's needs

based on identifying users, processes, and

information.

Answer option C is incorrect. The IPP is the source document, which is most useful for the ISSE when

defining the needed security

functionality. The IPP document contains the threats to the information management and the

security services and controls required to

counter those threats.

Answer option D is incorrect. The System Security Context is the output of SE and ISSEP. It is the

translation of the requirements into system

parameters and possible measurement concepts that meet the defined requirements.