Which statement indicates that the security categorization results are consistent with the enterprise architecture and commitment to protecting the organizational missions, business functions, and mission/business processes?

• A. A security categorization of the system is completed.
• B. The system is registered for management, accountability, coordination, and oversight.
• C. The information life cycle is identified.
• D. Security categorization results are consistent with the enterprise architecture and commitment to protecting the organizational missions, business functions, and mission/business processes.

Answer: (D)

The main idea is that security decisions should line up with the enterprise architecture and the organization’s commitment to protecting its missions, business functions, and processes. When the security categorization results are consistent with the enterprise architecture, it shows that the level and type of protection are built into the overall structure of how the organization operates, not just applied to a single system. This alignment indicates that the chosen security controls support and safeguard the mission-critical functions and processes the organization relies on, reflecting governance and strategic alignment across the enterprise.

Other statements describe important steps or aspects (completing a categorization, establishing governance and oversight, or identifying the information life cycle) but they do not by themselves demonstrate that the categorization results are harmonized with the enterprise architecture and the broader commitment to protecting organizational missions.