Certification and Accreditation (C&A or CnA) Is a Process for Implementing

question 81

Multiple Choice

Certification and Accreditation (C&A or CnA) is a process for implementing information security. It is a systematic procedure for evaluating, describing, testing, and authorizing systems prior to or after a system is in operation. Which of the following statements are true about Certification and Accreditation? Each correct answer represents a complete solution. Choose two.

• A) Accreditation is the official management decision given by a senior agency official to authorize operation of an information system.
• B) Certification is a comprehensive assessment of the management, operational, and technical security controls in an information system.
• C) Accreditation is a comprehensive assessment of the management, operational, and technical security controls in an information system.
• D) Certification is the official management decision given by a senior agency official to authorize operation of an information system.

---

Definitions:

Social Status

The position or rank of a person or group within the hierarchical social structure.

Galvanic Skin Response

A method of measuring the electrical resistance of the skin, which varies with the state of arousal or emotional state of an individual.

Electrical Conductivity

A measure of a material's ability to conduct an electric current, indicating how easily electrons can move through the material.

Sweat Glands

Specialized glands in the skin that produce sweat, part of the body's mechanism for regulating temperature.