The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts after the system
has been accredited in Phase 3. What are the process activities of this phase? Each correct
answer represents a complete solution. Choose all that apply.

A.
Security operations

B.
Maintenance of the SSAA

C.
Compliance validation

D.
Change management

E.
System operations

F.
Continue to review and refine the SSAA

Explanation:
The Phase 4 of DITSCAP C&A is known as Post Accreditation. This phase starts
after the system has been accredited in the Phase 3. The goal of this phase is to continue to
operate and manage the system and to ensure that it will maintain an acceptable level of residual
risk. The process activities of this phase are as follows: System operations Security operations
a Phase 3 activity.