CISSP Study Group/Blog
Help Me Build a Good Reference Guide
Help Me Build a Good Reference Guide
A correct implementation of the Certification and Accreditation program will help the organization maintain a secure environment on the computer systems. An establish life cycle will help the organization maintain a properly revised program.
|
Certification and Accreditation Guidance Development Life Cycle
|
||
| Phase | Task | Activity |
| Development | Creation | Plan for, research, and write the policy |
| Review | Complete an independent policy review prior to approval | |
| Approval | Obtain management approval of the policy | |
| Implementation | Communication | Disseminate the policy |
| Compliance | Implement the policy | |
| Exceptions | Manage cases where full implementation is not possible | |
| Maintenance | Awareness | Ensure continued awareness of the policy |
| Monitoring | Report and track compliance with the policy | |
| Enforcement | Handle violations of the policy | |
| Maintenance | Keep the policy current | |
| Disposal | Retirement | Retire the policy when it is no longer required |