Free CAP Exam Braindumps
Certified Authorization Professional Questions 196–200 (page: 41)

Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system?

The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system has been accredited in Phase 3.
What are the process activities of this phase? Each correct answer represents a complete solution. Choose all that apply.

The only output of the perform qualitative risk analysis are risk register updates.
When the project manager updates the risk register he will need to include several pieces of information including all of the following except for which one?

Billy is the project manager of the HAR Project and is in month six of the project. The project is scheduled to last for 18 months. Management asks Billy how often the project team is participating in risk reassessment in this project.
What should Billy tell management if he's following the best practices for risk management?

Rob is the project manager of the IDLK Project for his company. This project has a budget of $5, 600, 000 and is expected to last 18 months. Rob has learned that a new law may affect how the project is allowed to proceed - even though the organization has already invested over $750, 000 in the project.
What risk response is the most appropriate for this instance?