New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSEP Exam - Topic 5 Question 67 Discussion

Actual exam question for ISC2's ISSEP exam
Question #: 67
Topic #: 5
[All ISSEP Questions]

The National Information Assurance Certification and Accreditation Process (NIACAP) is the minimum standard process for the certification and accreditation of computer and telecommunications systems that handle U.S. national security information. Which of the following participants are required in a NIACAP security assessment Each correct answer represents a part of the solution. Choose all that apply.

Show Suggested Answer Hide Answer
Suggested Answer: A, B, D

Following are the different types of policies:

Regulatory: This type of policy ensures that the organization is following standards set by specific

industry regulations. This policy type

is very detailed and specific to a type of industry. This is used in financial institutions, health care

facilities, public utilities, and other

government-regulated industries, e.g., TRAI.

Advisory: This type of policy strongly advises employees regarding which types of behaviors and

activities should and should not take

place within the organization. It also outlines possible ramifications if employees do not comply with

the established behaviors and

activities. This policy type can be used, for example, to describe how to handle medical information,

handle financial transactions, or

process confidential information.

Informative: This type of policy informs employees of certain topics. It is not an enforceable policy,

but rather one to teach individuals

about specific issues relevant to the company. It could explain how the company interacts with

partners, the company's goals and

mission, and a general reporting structure in different situations.

Answer option C is incorrect. No such type of policy exists.


Contribute your Thoughts:

0/2000 characters
Angella
4 months ago
User representative? Not sure if they play a big role.
upvoted 0 times
...
Mireya
4 months ago
Totally agree, the Information Assurance Manager is key!
upvoted 0 times
...
Tasia
4 months ago
Wait, is the IS program manager really required? Sounds off.
upvoted 0 times
...
Elin
4 months ago
I think the Certification agent is also a must.
upvoted 0 times
...
Noah
4 months ago
Gotta have the Designated Approving Authority for NIACAP!
upvoted 0 times
...
Esteban
5 months ago
I feel like the IS Program Manager might not be directly involved, but I could be mixing it up with other processes.
upvoted 0 times
...
Val
5 months ago
I practiced a similar question, and I believe the Certification Agent is also a key participant.
upvoted 0 times
...
Melissa
5 months ago
I think the Information Assurance Manager is definitely involved, but I can't recall if the User Representative is required.
upvoted 0 times
...
Jerry
5 months ago
I remember the role of the Designated Approving Authority being crucial in NIACAP, but I'm not sure about the others.
upvoted 0 times
...
Irving
5 months ago
I'm a bit confused by this question. The wording is a bit tricky, and I'm not entirely sure which type of audit it's referring to. I'll have to review my notes on the different audit types to make sure I select the right answer.
upvoted 0 times
...
Asha
5 months ago
This question seems straightforward, but I want to make sure I understand the Privacy by Design concept correctly before answering.
upvoted 0 times
...
Mose
5 months ago
This looks like a straightforward question on debt financing types. I'll review the options carefully and eliminate the ones that are clearly types of debt financing.
upvoted 0 times
...
Long
5 months ago
Was it really necessary to create accounts in both Webex and Unified CM? I can't remember.
upvoted 0 times
...
Buffy
5 months ago
Based on my understanding of BIG-IP configurations, the Fallback Persistence Profile is used as a backup when the primary persistence method is not available. In this case, the Universal persistence profile seems like the best fit.
upvoted 0 times
...
Louisa
10 months ago
I hear the Designated Approving Authority is the one who gets to say, 'Yep, that's secure enough. Let's ship it!' Must be a pretty important role.
upvoted 0 times
Emile
8 months ago
E) User representative
upvoted 0 times
...
Jeff
8 months ago
D) IS program manager
upvoted 0 times
...
Sabina
8 months ago
C) Certification agent
upvoted 0 times
...
Brianne
8 months ago
B) Designated Approving Authority
upvoted 0 times
...
Mel
9 months ago
A) Information Assurance Manager
upvoted 0 times
...
...
Angelo
10 months ago
Wait, does the 'Information Assurance Manager' have to be someone who just really likes information? Asking for a friend.
upvoted 0 times
Pedro
8 months ago
E) User representative
upvoted 0 times
...
Gilma
8 months ago
D) IS program manager
upvoted 0 times
...
Jose
9 months ago
C) Certification agent
upvoted 0 times
...
Fatima
9 months ago
B) Designated Approving Authority
upvoted 0 times
...
Dana
9 months ago
A) Information Assurance Manager
upvoted 0 times
...
...
Jeffrey
10 months ago
Hmm, the IS program manager and user representative - those make sense as well. Can't leave out the folks who actually use the system!
upvoted 0 times
Dorothy
9 months ago
E) User representative
upvoted 0 times
...
Garry
9 months ago
D) IS program manager
upvoted 0 times
...
Antonio
9 months ago
C) Certification agent
upvoted 0 times
...
Luisa
10 months ago
B) Designated Approving Authority
upvoted 0 times
...
Emerson
10 months ago
A) Information Assurance Manager
upvoted 0 times
...
...
Gennie
10 months ago
I'm not sure about E, the User representative. I think it might not be required for a NIACAP security assessment.
upvoted 0 times
...
Luis
11 months ago
The Information Assurance Manager and Certification Agent seem like obvious choices too. Gotta have those experts involved, right?
upvoted 0 times
Lashawna
10 months ago
E) User representative
upvoted 0 times
...
Kate
10 months ago
C) Certification agent
upvoted 0 times
...
Brittani
10 months ago
A) Information Assurance Manager
upvoted 0 times
...
...
Maybelle
11 months ago
I'm pretty sure the Designated Approving Authority is a key participant in the NIACAP security assessment. Can't forget about that one!
upvoted 0 times
...
Tabetha
11 months ago
I agree with Tawna. A, B, C, and D make sense because they all play important roles in the certification and accreditation process.
upvoted 0 times
...
Tawna
11 months ago
I think A, B, C, and D are required in a NIACAP security assessment.
upvoted 0 times
...

Save Cancel