1)

Each of the following is TRUE about the DoD assessment guidance Control Correlation Identifier (CCI) EXCEPT:

Group of answer choices

maps security requirements to their low-level implementation

links high-level policy expressions to low-level technical implementations

demonstrates compliance to multiple information assurance frameworks

traces high-level functional requirements to their low-level security controls

2)

Who has primary responsibility for two or more Assess tasks? (select all that apply)

Group of answer choices

Authorizing Official

Risk Executive (Function)

Control Assessor

System Owner

Mission Owner

3)

What is the MOST important output of the Assess step?

Group of answer choices

automating activities to maximize speed and effectiveness

selecting the right team to conduct the control assessment

approving the control assessment expectations

creating a corrective action plan of unacceptable risks

4)

How many control enhancements are assignable in the LOW baseline of the IR family?

Group of answer choices

4

0

7

8

5)