As you prepare for implementation as the information system, Management has asked what formalized testing and validation can take place. You mention that the Certification and Accreditation process could meet this need.
- Take this opportunity to define the difference between Certification and Accreditation.
- To help with the process and not have to make up one on your own, describe at least 3 Industry/International Certification Frameworks that are used to evaluate the Security of an Application or System.
- Describe Common Criteria as one of the frameworks.