4.7 System Security C&A and Software Assurance
Certification and accreditation (C&A) processes for government information
systems are intended to ensure that before a deployed system becomes operational,
the system includes security controls and countermeasures that adequately