A.SC information type = {(Authentication, impact), (integrity, impact), (availability, impact)}

B.SC information type = {(confidentiality, impact), (integrity, impact), (availability, impact)}

C.SC information type = {(confidentiality, risk), (integrity, risk), (availability, risk)}

D.SC information type = {(confidentiality, controls), (integrity, controls), (authentication, controls)}

A.Designated Representative (DR)

B.Plan of Action and Milestones (POAM)

C.Risk Management Framework (RMF)

D.System Development Life-Cycle (SDLC)

A.Building information security controls into government information systems by applying up-to-date management, operational and technical security controls.

B.Maintaining awareness of the security posture of information systems through the application of
"enhanced monitoring processes."

C.Providing senior leaders essential information to facilitate decision making with regard to risk acceptance.

D.Creating secured environment to provide guidance to individuals involved in security information systems

E.Developing leadership to use, analyze and manage technical security of government information systems

A.Monitor

B.Implement Controls

C.Assess Controls

D.Select Controls

A.SSAA

B.DITSCAP

C.DIACAP

D.DAA