What is the difference between Diacap and RMF?

DIACAP authorized a sole DAA to make authorization decisions for each system under evaluation. RMF replaces DAAs with authorizing officials, or AOs, who can provide authorization in a joint fashion. It’s easy to see how such changes might result in more effective oversight.

Table of Contents

What is Diacap called now?

Note: The DIACAP process has been replaced by the Risk Management Framework (RMF) for DoD Information Technology. (Replaced) The DoD Information Assurance Certification and Accreditation Process (DIACAP) is the Department of Defense (DoD) process to ensure that risk management is applied on information systems (IS).

What are the different types of NIACAP accreditation?

The NIACAP lists 3 types of accreditation: System, Site and Type. A system accreditation is fairly straightforward since it deals with a single general support system or major application. A site accreditation addresses all the applications and systems at a particular location.

What is DIACAP compliance?

The DoD Information Assurance Certification and Accreditation Process (DIACAP) is the Department of Defense (DoD) process to ensure that risk management is applied on Information Systems (IS).

What does DIACAP stand for?

Information Assurance Certification and Accreditation Process
DOD Information Assurance Certification and Accreditation Process (DIACAP) is a process that provides the certification and accreditation (CA) of information systems used within the US Department of Defense (DoD).

Is DoDI 8500.2 still valid?

Well, the short answer is there will be no revised DoDI 8500.2 — DoD has decided to simply rescind it.

What is Diacap compliance?

What is DIACAP framework?

DIACAP is a set of standard activities, tasks, and reports that make up the process for the certification and accreditation (C&A). It establishes a C&A process to manage the implementation of IA capabilities and services and provide visibility of accreditation decisions regarding the operation of DoD systems.

What are the four phases of NIACAP?

The NIACAP is composed of four phases (Figure 1): Definition, Verification, Validation, and Post Accreditation.

What is Type accreditation?

Share to Facebook Share to Twitter. Note: (C.F.D.) Definition(s): A form of accreditation that is used to authorize multiple instances of a major application or general support system for operation at approved locations with the same type of computing environment.

What are the phases of Diacap?

The DIACAP phases are: initiating the plan, implementing and validating the assigned IA controls, making certification determination and accreditation decision, maintaining authorization to operating and conducting reviews, and decommissioning (the system).

What is the difference between niacap and DIACAP?

DIACAP is the C&A guidance for federal departments and agencies that fall under the Department of Defense and NIACAP is the guidance for all other departments, agencies, and bureaus of the executive branch of the federal government (Zadjura 2003). What is DIACAP (DoD Information Assurance Certification and Accreditation Process)?

What control set does DOD use for DIACAP?

Currently, DoD uses the DODI 8500.2 control set for the DIACAP implementation. With the move to RMF, DoD agencies and components will need to move to the NIST SP 800-53 Revision 4 control set to match the controls used by the rest of the Federal Government.

What is DITSCAP and DIACAP?

In 2007, DITSCAP was replaced with DIACAP, Defense Information Assurance Certification & Accreditation Process. DIACAP was much more enterprise-centric and also drew from the DoD 8500.2 standard control set.

What is the replacement for the DIACAP process?