204k views
4 votes
Certification and accreditation (C&A) for Storage of Classified DoD Information Systems.

A. DoD Manual 5100.76M governs the C&A for Storage of Classified DoD Information Systems.
B. Designated Accrediting Authority (DAAs) have the authority and responsibility for accreditation decisions.

1 Answer

4 votes

Final answer:

The question addresses the processes of Certification and Accreditation (C&A) as governed by DoD Manual 5100.76M for the storage of classified DoD Information Systems, highlighting the responsibilities of the Designated Accrediting Authority (DAAs).

Step-by-step explanation:

The question pertains to Certification and Accreditation (C&A) processes for the storage of classified information systems within the Department of Defense (DoD). Specifically, it highlights that the DoD Manual 5100.76M governs these C&A processes. It also mentions the role of Designated Accrediting Authority (DAAs), who have the responsibility and authority to make decisions about the accreditation of systems handling classified information.

To explain further, certification is the process of evaluating the security of a DoD information system against a set of criteria, ensuring it meets specific security requirements. Accreditation, on the other hand, is the formal declaration by the DAA that an information system is approved to operate with a particular security mode using a prescribed set of safeguards at an acceptable level of risk.

User Seth McCauley
by
8.9k points