In the National Information Assurance Certification and Accreditation Process (NIACAP), a type
accreditation performs which one of the following functions?

A.
Evaluates the applications and systems at a specific, self-contained location

B.
Evaluates a major application or general support system

C.
Verifies the evolving or modified system’s compliance with the information agreed on in the
System Security Authorization Agreement (SSAA)

D.
Evaluates an application or system that is distributed to a number of different locations

Explanation:
* Answer “Evaluates a major application or general support system” is the NIACAP system
accreditation. * Answer “Verifies the evolving or modified system’s compliance with the information
agreed on in the System Security Authorization Agreement (SSAA)” is the Phase 2 or Verification
phase of the Defense Information Technology Security Certification and Accreditation Process
(DITSCAP). The objective is to use the SSAA to establish an evolving yet binding agreement on the
level of security required before the system development begins or changes to a system are made.
After accreditation, the SSAA becomes the baseline security configuration document. * Answer
“Evaluates the applications and systems at a specific, self-contained location” is the NIACAP site
accreditation.