712-50 practice question 11 of 35

The process for management approval of the security certification process which states the risks and mitigation of such risks of a given IT system is called

Full set: 493 questions
Answer options
A: Security certification
B: Security system analysis
C: Security accreditation Correct answer
D: Alignment with business practices and goals.
Correct Answer:
C. Security accreditation
Explanation

 Definition of Security Accreditation Security accreditation is the formal approval by management of the security certification process. It documents the identified risks, their mitigations, and establishes the acceptability of residual risks for an IT system.  Steps in the Process Review findings from the security certification process. Assess residual risks and proposed mitigations. Obtain formal approval from authorized personnel.  Comparison of Options
A . Security certification: Precedes accreditation and focuses on technical validation.
B . Security system analysis: Broad assessment, not specific to the certification-accreditation lifecycle.
D . Alignment with business practices and goals: Pertains to overall strategic alignment, not risk acceptance.  EC-Council Reference This process ensures management involvement and accountability, which aligns with CISO responsibilities under risk management frameworks taught by EC-Council.

Scroll to Top