Were you part of the C&A team?

• A. Yes, I was part of the C&A process
• B. No, I was not part of the C&A
• C. I was partly involved
• D. Not sure

Answer: (A)

This question checks whether you’ve been directly involved in the Certification and Accreditation (C&A) process used under FISMA. Being part of the C&A team means you actively contributed to the steps that allow a system to be authorized to operate: categorizing the system, selecting and implementing security controls, assessing their effectiveness, and obtaining an authorization decision (with ongoing monitoring).

If you were part of the C&A process, you’d likely have worked on or facilitated key artifacts such as the System Security Plan, Security Assessment Report, authorization package, and any remediation actions in a Plan of Actions and Milestones. That level of involvement signals you’re familiar with how a system earns and maintains authorization, which is precisely what the statement is conveying.

The other options would imply less clear or no involvement, which doesn’t align with having hands-on participation in the C&A activities. Not sure creates ambiguity, and partially involved suggests a narrower role than being on the C&A team. So the statement that you were part of the C&A process best reflects the demonstrated experience.