ISC2 ISSEP Exam - Topic 4 Question 8 Discussion

DoD 8500.1 Information Assurance (IA) sets up policies and allots responsibilities to achieve DoD IA

through a defense-in-depth approach that

integrates the capabilities of personnel, operations, and technology, and supports the evolution to

network-centric warfare.

DoD 8500.1 also summarizes the roles and responsibilities for the persons responsible for carrying

out the IA policies.

Answer option A is incorrect. The DoD 8500.2 Information Assurance Implementation pursues

8500.1. It provides assistance on how to

implement policy, assigns responsibilities, and prescribes procedures for applying integrated, layered

protection of the DoD information

systems and networks.

DoD Instruction 8500.2 allots tasks and sets procedures for applying integrated layered protection of

the DOD information systems and

networks in accordance with the DoD 8500.1 policy. It also provides some important guidelines on

how to implement an IA program.

Answer option C is incorrect. DoDI 5200.40 executes the policy, assigns responsibilities, and

recommends procedures under reference for

Certification and Accreditation(C&A) of information technology (IT).

Answer option B is incorrect. DoD 8510.1-M DITSCAP provides standardized activities leading to

accreditation, and establishes a process and

management baseline.