In management controls, CA stands for which?

• A. Certification and Accreditation
• B. Compliance Audit
• C. Configuration and Assessment
• D. Control Authority

Answer: (A)

In management controls, CA refers to the process of Certification and Accreditation. This pair covers two essential steps: first, Certification, where security controls on the information system are independently evaluated to verify they meet defined requirements and properly protect the system; second, Accreditation, where a designated authority formally authorize the system to operate based on the evaluation results and accepted risks. Together, they establish that the system has been reviewed and is approved to run in the environment.

The other options don’t fit because they don’t describe this formal evaluation-and-authorization process: a Compliance Audit checks adherence to requirements, but not the formal certification/authorization; Configuration and Assessment isn’t a standard term for the formal process; Control Authority isn’t the name of the process.