I would like to generate some discussion on the certification and accreditation processes the government uses. I am particularly interested in the Defense Department Information Assurance Certification and Accreditation Process (DIACAP) guidance, which seems to me to be the bargain basement approach to certification and accreditation. Used alone, DIACAP only provides an agency with the process to achieve certification, while not addressing the ongoing analysis of new threats and vulnerabilities. In fact, most processes except the one the National Institute of Standards and Technology has provided are poorly written when it comes to risk assessment.
Anonymous
SAIC
View Comments
There are currently no comments to display.
Post a Comment
To post a comment, you must be a registered user of FCW.com and be logged in. Use one of the forms below to login or register for FREE to FCW.com. To protect your privacy, you can use an alias as your username.
