Câu 54: CISSP-ISSEP: Information Systems Security Engineering Professional

You work as a security manager for BlueWell Inc. You are going through the NIST SP 800-37 C&A methodology, which is based on four well defined phases. In which of the following phases of NIST SP 800-37 C&A methodology does the security categorization occur

1. A. Continuous Monitoring
2. B. Initiation — đáp án hiện tại
3. C. Security Certification
4. D. Security Accreditation