Technical evaluation of assurance to ensure that security requirements have been met is known as?
A.
Accreditation
B.
Certification
C.
Validation
D.
Verification
Explanation:
b. Certification is the process of evaluating the security stance of the software or system against a predetermined set of security standards or policies. Management, after reviewing the certifi cation, authorizes the software or system to be implemented in a production status, in a specific environment, for a specific period. There are two types of accreditation: provisional and full. Management approval is known as accreditation. Pages 185186.
Answer D is not so bad either. Verification determines if the product accurately represents and meets the specifications.
That’s the same as ‘a process of evaluating the security stance of the software or system against a predetermined set of security standards or policies’ or ‘a technical evaluation of assurance to ensure that security requirements have been met’.
Certification is the process of evaluating the security stance of the software or system against a predetermined set of security standards or policies.