How many surprise checks are required annually to maintain the International Computer Security Association seal?

How many surprise checks are required annually to maintain the International Computer Security Association seal?

• A. One
• B. Two
• C. Three
• D. Four

Answer: (B)

Two surprise checks annually are required. This arrangement keeps the certification credible by verifying the product’s security controls continue to operate as intended after certification, not just at the moment of approval. A surprise check assesses things like configurations, patch levels, access controls, logging, and change management, helping catch any drift in security practices. Performing only one check could miss ongoing lapses, while more than two isn’t the standard practice and adds unnecessary burden.

Two surprise checks annually are required. This arrangement keeps the certification credible by verifying the product’s security controls continue to operate as intended after certification, not just at the moment of approval. A surprise check assesses things like configurations, patch levels, access controls, logging, and change management, helping catch any drift in security practices. Performing only one check could miss ongoing lapses, while more than two isn’t the standard practice and adds unnecessary burden.