In the National Information Assurance Certification and Accreditation
Process (NIACAP), a type accreditation performs which one of the following
functions?

A.
Evaluates the applications and systems at a specific, self-contained location

B.
Evaluates a major application or general support system

C.
Verifies the evolving or modified system’s compliance with the information agreed on in the
System Security Authorization Agreement (SSAA)

D.
Evaluates an application or system that is distributed to a number of
different locations

Explanation:
* Answer “Evaluates a major application or general support system” is the NIACAP system
accreditation.
* Answer “Verifies the evolving or modified system’s compliance with the information agreed on in
the System Security Authorization Agreement (SSAA)” is the Phase 2 or Verification phase of the
Defense Information Technology Security Certification and Accreditation Process (DITSCAP). The
objective is to use the SSAA to establish an evolving yet binding agreement on the level of
security required before the system development begins or changes to a system are made. After
accreditation, the SSAA becomes the baseline security configuration document.
* Answer “Evaluates the applications and systems at a specific, self-contained location” is the
NIACAP site accreditation.