Quote:
Originally Posted by MGM135is
TAA compliance is misleading reassurance.
|
It's something and better than nothing. Systems...especially in highly secure environments would still have to go through scanning and meeting various requirements specific to the agency such as STIG, JTIC, Common Criteria, etc. TAA is just a baseline/starting point.