Chapter 10, Problem 20RQ

Explanation of Solution

Certification and accreditation on information systems security management:

In information system security management, “Accreditation” allow an information technology system to practice, stock, or transfer the information.

• It is approved by a management official and helps by promising that systems are of sufficient quality.
• It also challenges the staff in technical and managers to discovery the better methods to promise the security which is given requirements “technical”, “operational”, and “mission” constraints.

In information system security management, “Certification” is referred as the complete assessment about the technical and nontechnical security controls of an information technology system to maintain the accreditation process.

Organizations follow accreditation or certification process helps to add a competitive benefits or to provide guarantee or assurance to their customers...