Question 71

The characterization of information or an information system based on an assessment of the potential impact that a loss of confidentiality, integrity, or availability of such information or information system would have on organizational operations, organizational assets, individuals, other organizations, and the Nation.
Response:
  • Question 72

    A system or system element that is outside of the authorization boundary established by the organization and for which the organization typically has no direct control over the application or required controls of the assessment of control effectiveness best defines:
    Response:
  • Question 73

    The management, operational, and technical controls (i.e., safeguards or countermeasures) employed by an organization in lieu of the recommended controls in the baselines described in NIST Special Publication 800-53 and CNSS Instruction 1253, that provide equivalent or comparable protection for an information system.
    Response:
  • Question 74

    Who makes decision to require an IS to under re-accreditation based on security status reporting
    & documentation & recommendation of Designated Rep & IT security staff? Response:
  • Question 75

    Which of the following is an official authorization decision that is focused on specific controls implemented in a defined environment of operation to support one or more systems residing within the environment?
    Response: