Process Activities of DITSCAP C&A Phase 1
Question
The Phase 1 of DITSCAP C&A is known as Definition Phase.
The goal of this phase is to define the C&A level of effort, identify the main C&A roles and responsibilities, and create an agreement on the method for implementing the security requirements.
What are the process activities of this phase? Each correct answer represents a complete solution.
Choose all that apply.
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.This phase comprises three process activities: Document mission need Registration Negotiation Answer: D is incorrect.
Initial Certification Analysis is a Phase 2
The Phase 1 of DITSCAP C&A is known as Definition Phase.
The goal of this phase is to define the C&A level of effort, identify the main C&A roles and responsibilities, and create an agreement on the method for implementing the security requirements.
The Phase 1 starts with the input of the mission need.
activity.
The Defense Information Technology Security Certification and Accreditation Process (DITSCAP) is a process that is used by the Department of Defense (DoD) to certify and accredit their information systems. The DITSCAP process has six phases, and the first phase is known as the Definition Phase.
The goal of the Definition Phase is to define the Certification and Accreditation (C&A) level of effort, identify the main C&A roles and responsibilities, and create an agreement on the method for implementing the security requirements.
The process activities of the Definition Phase include:
A. Negotiation: This process activity involves negotiating the resources and requirements necessary to complete the C&A process successfully. This includes negotiating the scope, schedule, budget, and resources needed for the C&A effort.
B. Registration: This process activity involves registering the information system that is being certified and accredited with the appropriate authorities. This includes registering the system with the DoD Information Technology Portfolio Repository (DITPR), the Defense Information System for Security (DISS), and other relevant systems.
C. Document mission need: This process activity involves documenting the mission need for the information system that is being certified and accredited. This includes identifying the system's purpose, its users, and the mission that it supports.
D. Initial Certification Analysis: This process activity involves conducting an initial analysis of the information system to determine its current security posture. This includes reviewing the system's architecture, design, and implementation to identify potential security vulnerabilities.
In summary, the Definition Phase of the DITSCAP process involves negotiating the resources and requirements necessary to complete the C&A process successfully, registering the information system with the appropriate authorities, documenting the mission need for the information system, and conducting an initial analysis of the information system to determine its current security posture.
