Certification and Accreditation: A Program for Practitioner Education

摘要

Large complex systems need to be analyzed prior to operation so that those depending upon them for the protection of their information have a well- defined understanding of the measures that have been taken to achieve security and the residual risk the system owner assumes during its operation. The U.S. military calls this analysis and vetting process certification and accreditation. Today there is a large, unsatisfied need for personnel qualified to conduct system certifications. An educational program to address those needs is described.