1 / 51

10 pt

MSSP/Self-Certification. Plan Submission. IATO/ATO. Glossary. Parts of a SSP. 5 pt. 5 pt. 5 pt. 5 pt. 5 pt. 10 pt. 10 pt. 10 pt. 10 pt. 10 pt. 15 pt. 15 pt. 15 pt. 15 pt. 15 pt. 20 pt. 20 pt. 20 pt. 20 pt. 20 pt. 25 pt. 25 pt. 25 pt. 25 pt. 25 pt.

ratana
Télécharger la présentation

10 pt

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. MSSP/Self-Certification Plan Submission IATO/ATO Glossary Parts of a SSP 5 pt 5 pt 5 pt 5 pt 5 pt 10 pt 10 pt 10 pt 10 pt 10 pt 15 pt 15 pt 15 pt 15 pt 15 pt 20 pt 20 pt 20 pt 20 pt 20 pt 25 pt 25 pt 25 pt 25 pt 25 pt

  2. Allows Self-Certification

  3. What is a MSSP and ATO

  4. Must happen at least once every three years

  5. What is reaccreditation?

  6. Document that must accompany a MSSP

  7. What is a System Security Profile?

  8. Self-certification is based upon

  9. What is a similar system and MSSP?

  10. Self-certification is granted when it states so in the

  11. What is the MSSP ATO letter?

  12. When submitting a plan to the ODAA the first 5 characters in the UID

  13. What is a cage code?

  14. LAN, WAN, Standalone Multiuser, Standalone Single-User, Peer-to-Peer

  15. What are system types?

  16. Capital, Northern, Southern and Western

  17. What are regions?

  18. When submitting a plan to the ODAA who must also be CC’d

  19. Who are the ISSP and ISR?

  20. High (Top Secret)Medium (Secret)Basic (Confidential)

  21. What are classifications

  22. Valid for up to 180 days

  23. What is an IATO

  24. What is valid for 3 years after being issued

  25. What is a ATO

  26. An ATO is official after being signed by

  27. Who is the RDAA?

  28. After the issuance of an IATO, within 180 days the ISSP must conduct an

  29. What is an onsite visit?

  30. An IS can only be approved to process in two ways

  31. What is DSS accreditation and self-certification

  32. Formal declaration by the DAA that an IT system is approved to operate.

  33. What is accreditation?

  34. The contractor employee responsible for the implementation of Automated Information Systems

  35. Who is the ISSM?

  36. An assembly of computer hardware, software , and firmware configured for the purpose of computing, storing, retrieving, displaying or otherwise manipulating classified data

  37. What is an Automated Information System?

  38. Document(s) submitted by the WAN owner to the WAN DAA that describes the security features and requirements of the WAN

  39. What is an NSP?

  40. Official with the authority to formally assume the responsibility for operating a system or network at an acceptable level of risk.

  41. Who is the Designated Approving Authority?

  42. A listing of classified components associated with an AIS

  43. What is a hardware baseline?

  44. Record of a controlled area

  45. What is a DD Form 147?

  46. A depiction of how a Information System designed arranged

  47. What is a configuration diagram?

  48. Document stating the system operates in accordance with the approved MSSP/SSP and that the security features are implemented and operational

  49. What is the ISSM Certification Test Checklist?

  50. Form used to acknowledge the responsibilities associated with the use of an AIS

More Related