Certified Incident Handler (CIH) Practice Ecam

What standard establishes a management structure for certifying and accrediting systems related to information assurance?

1. FISMA

2. NIST

3. NIACAP

4. ISO 27001

The correct answer is: NIACAP

The correct answer is the standard known for establishing a management structure for certifying and accrediting systems related to information assurance is NIACAP. The National Information Assurance Certification and Accreditation Process (NIACAP) specifically focuses on the certification and accreditation of information systems and is designed to ensure that these systems meet required security standards. It provides a structured approach to assess risk and verify the effectiveness of security controls in place, thereby aiding organizations in maintaining a secure information environment. While FISMA is related to the overall framework of security for federal information systems and mandates the development of risk management frameworks, it does not directly establish a detailed management structure for certifying and accrediting those systems. NIST provides guidelines and standards related to information security, including the Risk Management Framework, but it does not itself serve as a structure specifically for certification and accreditation like NIACAP does. ISO 27001 is an international standard that focuses on an information security management system (ISMS) but does not specifically target the certification and accreditation aspect within the U.S. governmental context in the same way that NIACAP does.