Which statement is not true about the SAA? - ProProfs Discuss
Cancel
TopicsDown
Products Down
Follow Us:
FacebookTwitter
Advertisement

Which statement is not true about the SAA?



A. The SSAA is used throughout the entire process.
B. The SSAA is a formal agreement among the DAA(s), certifier, user representative, and program manager.
C. The SSAA is used only during Phase 3, Validation.
D. The SSAA documents the conditions of the C&A for an IS.

This question is part of (ISC)2 Guide to the CAP Review Questions
Asked by Chrisjkent, Last updated: Sep 09, 2020

+ Answer
Request
Question menu
Vote up Vote down

2 Answers

BISSYOJO

BISSYOJO

BISSYOJO
BISSYOJO

Answered Jun 02, 2018

The product of the DITSCAP Phase 1 is the System Security Authorization Agreement (SSAA).

The SSAA is a formal agreement among the DAA(s), certifier, user representative, and program manager
The objective of the SSAA is to establish an evolving yet binding agreement on the level of security required before the system development begins or changes to a system are made.
The SSAA is used throughout the entire C&A process to guide actions, document decisions, specify IA requirements, document certification tailoring and level of effort, identify possible solutions, and maintain operational systems security.
After accreditation, the SSAA becomes the baseline security configuration document.

upvote downvote
Reply 

chrisjkent

chrisjkent

chrisjkent
Chrisjkent

Answered Oct 06, 2017

The SSAA is used only during Phase 3, Validation.

The SSAA is used throughout the entire C&A process. After accreditation, the SSAA becomes the baseline security configuration document and is maintained during Phase 4.
upvote downvote
Reply 

Advertisement
Advertisement
Search for Google images Google Image Icon
Select a recommended image
Upload from your computer Loader
Image Preview
Search for Google images Google Image Icon
Select a recommended image
Upload from your computer Loader
Image Preview
Search for Google images Google Image Icon
Select a recommended image
Upload from your computer Loader

Email Sent
We have sent an email to your address "" with instructions to reset your password.