Users' Needs Met by Supplied Solution

D.

Acceptance confirms that users needs have been met by the supplied solution.Verification and Validation informs Acceptance by establishing the evidenceset against acceptance criteria - to determine if the solution meets the users needs.

Acceptance should also explicitly address any integration or interoperability requirements involving other equipment or systems.

To enable acceptance every user and system requirement must have a 'testable' characteristic.

Accreditation is the formal acceptance of security, adequacy, authorization for operation and acceptance of existing risk.

Accreditation is the formal declaration by a Designated Approving Authority (DAA) that an IS is approved to operate in a particular security mode using a prescribed set of safeguards to an acceptable level of risk.

Certification is the formal testing of security safeguards and assurance is the degree of confidence that the implemented security measures work as intended.The certification is a Comprehensive evaluation of the technical and nontechnical security features of an IS and other safeguards, made in support of the accreditation process, to establish the extent to which a particular design and implementation meets a set of specified ecurity requirements.

Assurance is the descriptions of the measures taken during development and evaluation of the product to assure compliance with the claimed security functionality.

For example, an evaluation may require that all source code is kept in a change management system, or that full functional testing is performed.

The Common Criteria provides a catalogue of these, and the requirements may vary from one evaluation to the next.

The requirements for particular targets or types of products are documented in the Security Targets (ST) and Protection Profiles (PP), respectively.

Source: ROTHKE, Ben, CISSP CBK Review presentation on domain 4, August 1999

and Official ISC2 Guide to the CISSP CBK, Second Edition, on page 211

and http://www.aof.mod.uk/aofcontent/tactical/randa/content/randaintroduction.htm.

The correct answer is D. Acceptance.

Acceptance refers to the process of confirming that a system or solution meets the requirements and expectations of the users or stakeholders who will be using it. It is an essential step in any project implementation, ensuring that the system has been developed according to the specifications and that it meets the desired quality standards.

Acceptance testing can take several forms, including functional testing, user acceptance testing, and performance testing. The goal of acceptance testing is to validate that the system is working correctly and that it meets the needs of the users.

Accreditation is a process of formal recognition that a system meets specific standards, such as compliance with security regulations. Certification is the process of verifying that a product or service meets a set of established standards, such as compliance with industry standards or best practices.

Assurance is the process of providing confidence that a system or solution is reliable, secure, and meets the desired quality standards, typically achieved through testing and audits. However, it does not necessarily confirm that the users' needs have been met.

Therefore, among the given options, acceptance is the most appropriate answer as it specifically refers to the confirmation that users' needs have been met by the supplied solution.