The Definitive Guide to the C Transformation Process

INTRODUCTION

For over three decades, the authors of this book have been deeply involved in developing C&A policy, but more importantly in actually providing hands-on help to organizations, ranging from large federal agencies to commercial entities, to successfully navigate the C&A process. We continue to be directly and intensely involved in the C&A transformation, including the transition in terminology from C&A to authorization. We share a driving thought: to do whatever is necessary to protect the information systems of our clients.

Purpose and scope

This basic purpose of this book is to provide a definitive guide to authorization for persons with knowledge of information systems and/or information systems security, but not necessarily ...