The development of the C&A package will be a critical responsibility for the internal federal C&A team. The initiation of the C&A project, analyzing research, preparing the required documents, verifying information, and retaining ethics are all important responsibilities during the development of the C&A package.

In a report of 3-5 pages, provide an explanation of this C&A developmental process. The report should include the following:

• Title page
• Introduction to the paper
• Explanation of what is required to initiate the C&A project, examples of which include the following:

o Creating a contact list
o Holding a kick-off meeting
o Obtaining any existing agency guidelines

• Explanation of the types of research that need to be analyzed, examples of which include the following:

o Documents from the information system developers and administrators
o Previous certification package

• Description of how to represent the required documentation and requirements in the certification package
• Description of the role of ethics in developing the certification package

o An example of an ethics issue: the IS owner wants the certification review team to get the IS certified; therefore, it may be requested for you to compromise your ethics.

• Reference page in APA format

The following documents can be used to assist you with this assignment:

• DOE CIO Guide 205.1-1, Management, Operational, and Technical Controls
• 5 CFR 930, Employees Responsible for the Management of Use of Federal Computer Systems
• The National Institute of Standards and Technology (NIST) special Publication 800-16, Information Technology Security Training Requirements: A Role- and Performance-Based Model, dated April 1998
• Executive Order 13103, Computer Software Piracy, dated September 30, 1998, that requires training on the prevention of software piracy

The development of the C&A package will be a critical responsibility for the internal federal C&A team. The initiation of the C&A project, analyzing research, preparing the required documents, verifying information, and retaining ethics are all important responsibilities during the development of the C&A package.

In a report of 3-5 pages, provide an explanation of this C&A developmental process. The report should include the following:

• Title page
• Introduction to the paper
• Explanation of what is required to initiate the C&A project, examples of which include the following:

o Creating a contact list
o Holding a kick-off meeting
o Obtaining any existing agency guidelines

• Explanation of the types of research that need to be analyzed, examples of which include the following:

o Documents from the information system developers and administrators
o Previous certification package

• Description of how to represent the required documentation and requirements in the certification package
• Description of the role of ethics in developing the certification package

o An example of an ethics issue: the IS owner wants the certification review team to get the IS certified; therefore, it may be requested for you to compromise your ethics.

• Reference page in APA format

The following documents can be used to assist you with this assignment:

• DOE CIO Guide 205.1-1, Management, Operational, and Technical Controls
• 5 CFR 930, Employees Responsible for the Management of Use of Federal Computer Systems
• The National Institute of Standards and Technology (NIST) special Publication 800-16, Information Technology Security Training Requirements: A Role- and Performance-Based Model, dated April 1998
• Executive Order 13103, Computer Software Piracy, dated September 30, 1998, that requires training on the prevention of software piracy