Exam CAP topic 1 question 5 discussion

FIPS 102 outlines a six-step process for computer security certification and accreditation. These steps include planning, data collection, basic evaluation, detailed evaluation, reporting findings, and accreditation. , DITSCAP follows a four-phase process—Definition, Verification, Validation, and Post-Accreditation. While it involves technical security evaluations, it does not align with a six-step structure.

DITSCAP (Data Interface Technical Security Certification and Accreditation Program) is a six-step technical security evaluation methodology used to assess the security of information systems and networks. While others may be risk assessment methodologies, they do not define a six-step technical security evaluation methodology.