Question

In order to be compliant with the NIST publications, policies must include key security control requirements. One of these key requirements includes certification and accreditation, which is a process that occurs after the system is documented, controls tested, and risk assessment completed. It is required before going live with a major system. Once a system is certified and accredited, responsibility shifts to the owner to operate the system.

A) True
B) False

Answer 1

The answer is "Option A".

Step-by-step explanation:

A comprehensive collection of principles, guidelines, proposals, and studies on information and information systems privacy and safety are produced and carried out in the NIST publications.

• The FIPS management standards for federal information and security laws contain various technical reporting sequences.
• This process takes place after a plan is identified, reviews are carried out and risk analysis is performed.