We need better C&A processes

I would like to generate some discussion on the certification and accreditation processes the government uses. I am particularly interested in the Defense Department Information Assurance Certification and Accreditation Process (DIACAP) guidance, which seems to me to be the bargain basement approach to certification and accreditation. Used alone, DIACAP only provides an agency with the process to achieve certification, while not addressing the ongoing analysis of new threats and vulnerabilities. In fact, most processes except the one the National Institute of Standards and Technology has provided are poorly written when it comes to risk assessment.

Anonymous
SAIC

Featured

  • Federal 100 Awards
    Federal 100 logo

    Fed 100 nominations are now open

    Help us identify this year's outstanding individuals in federal IT.

  • Defense
    The U.S. Army Corps of Engineers and the National Geospatial-Intelligence Agency (NGA) reveal concept renderings for the Next NGA West (N2W) campus from the design-build team McCarthy HITT winning proposal. The entirety of the campus is anticipated to be operational in 2025.

    How NGA is tackling interoperability challenges

    Mark Munsell, the National Geospatial-Intelligence Agency’s CTO, talks about talent shortages and how the agency is working to get more unclassified data.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.