controls, and involves very little testing of the system’s technical security controls.
The depth of analysis, particularly of the system’s software components, is minimal.
By contrast with FISMA and DITSCAP, DoD Information Assurance
Certification and Accreditation Process (DIACAP), Director, Central Intelligence