The AO/DAA may be delegated in writing by a responsible senior authority. Question: Who can be an Authorizing Official (AO)/Designated Accrediting Authority (DAA)?Īnswer: Usually a senior commissioned officer or senior government civilian (GS-15 or above). It must be a closed system and cannot be physically or logically connected to the contractor corporate LAN/Internet connection. The sponsoring agency is responsible for validating the requirement, arranging funding and providing a topology and narrative description of the system to the NIPRNET Service Manger. The connection must be validated by the NIPRNET Service Manager and approved by OSD (NII). Question: Can a contractor have access to the NIPRNET?Īnswer: Yes. Each community has a specific role in developing, procuring, employing and operating an IS with an acceptable level of residual risk. This approach enhances the security of the Defense Information Infrastructure (DII) and reduces the resources necessary to provide and maintain the required level of security. DIACAP is the standard DoD process for identifying information security requirements, providing security solutions, and managing information system security activities.
Question: What does the acronym DIACAP mean?Īnswer: The Department of Defense Information Assurance Certification and Accreditation Process (DIACAP) is the approach used for the Certification & Accreditation (C&A) of the Core Network. Accreditation is the formal approval to operate which is granted by the Authorizing Official (AO)/Designated Accrediting Authority (DAA).
Certification is granted by the Certifying Authority. Question: What is the difference between certification and accreditation?Īnswer: Certification is the evaluation of the technical and non technical security features of an information system. The accreditation is usually documented in the DIACAP Scorecard, but may also be accepted as an Interim/Authority to Operate (I/ATO) AO/DAA signed letter.Īnswer: Certification is a comprehensive evaluation of the technical and non-technical security features of an Information Technology (IT) system and other safeguards, made in support of the Accreditation process, to establish the extent that a particular design and implementation meets a set of specified security requirements. Each Automated Information System (AIS) or network connected to the Unclassified Defense System Information Network (DISN) will be accredited to operate in accordance with the appropriate AO/DAA-approved set of security safeguards. The information requested is used to support the certification and accreditation requirements of the DISN infrastructure, including the Regional Network Operations and Security Centers (RNOSCs), DoD Network Information Center (NIC), and the Department of Defense Computer Emergency Response Team (DoD CERT).Īnswer: Accreditation is the formal declaration by the Authorizing Official (AO), formerly the Designated Accrediting Authority (DAA), that an Information Technology (IT) system is approved to operate in a particular security mode using a prescribed set of safeguards at an acceptable level of risk. To maintain system integrity, it is crucial that every user maintains the required standards for normal, secure connectivity. Question: What is the purpose of the Connection Approval Process (CAP)?Īnswer: The purpose of the Connection Approval Process (CAP) is to provide existing and potential Unclassified but Sensitive Internet Protocol Router Network (NIPRNET), DISN Asynchronous Transfer Mode System – Unclassified (DATMS-U), Systems Approval Process (SYSAPP), DISN Video Services (DVS) Defense Switched Network (DSN) and OSD Commercial Internet Waiver subscribers with connectivity requirements that must be followed. This page contains frequently asked questions on both the unclassified and classified Connection Approval Process (CAP). If you would like to attend a live session please visit the training page for more information. These FAQs come directly from the most common mission partner inquiries recieved, and from the live Enterprise Connection Division subject matter expert hosted Question and Answer sessions that are available regularly as part of the Mission Partner Training Program.
0 kommentar(er)
