ISC2 Exam ISSEP Topic 3 Question 11 Discussion

Under NSTISSP No. 6 policy, NIACAP is mandatory for all the systems that process USG classified

information.

The various CNSS policies are as follows:

NSTISSP No. 6: It describes the national policy on certification and accreditation of national security

telecommunications and

information systems.

NSTISSP No. 7: It describes the national policy on secure electronic messaging service.

NSTISSP No. 11: It describes the national policy governing the acquisition of information assurance

(IA) and IA-enabled Information

Technology (IT) products.

NSTISSP No. 101: It describes the national policy on securing voice communications.

NSTISSP No. 200: It describes the national policy on controlled access protection.

CNSSP No. 14: It describes the national policy governing the release of information assurance

products and services to authorized U.S.

persons or activities that are not a part of the federal government.

NCSC No. 5: It describes the national policy on use of cryptomaterial by activities operating in high

risk environments.