CGRC Exam Question 111
Which of the following DoD directives is referred to as the Defense Automation Resources Management Manual?
Response:
Response:
CGRC Exam Question 112
You and your project team are identifying the risks that may exist within your project. Some of the risks are small risks that won't affect your project much if they happen. What should you do with these identified risk events?
Response:
Response:
CGRC Exam Question 113
Who makes decision to require an IS to under re-accreditation based on security status reporting
& documentation & recommendation of Designated Rep & IT security staff? Response:
& documentation & recommendation of Designated Rep & IT security staff? Response:
CGRC Exam Question 114
Which of the following individuals is responsible for preparing and submitting security status reports to the organizations?
Response:
Response:
CGRC Exam Question 115
An initial remediation action was taken by the information system owner (ISO) based on findings from the security assessment report (SAR). What is the next appropriate step based on the Risk Management Framework (RMF)?
Response:
Response:
