Certified Authorization Professional (CAP) — Question 18

Which of the following professionals is responsible for starting the Certification & Accreditation (C&A) process?

Answer options

• A. Information system owner
• B. Authorizing Official
• C. Chief Risk Officer (CRO)
• D. Chief Information Officer (CIO)

Correct answer: A

Explanation

The Information system owner is the individual responsible for initiating the Certification & Accreditation (C&A) process, as they manage the system and ensure it meets necessary standards. The Authorizing Official, Chief Risk Officer, and Chief Information Officer have roles related to oversight and risk management, but they do not initiate the C&A process.