Term:Authorizing Official

GAO-09-232G

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency/entity operations (including mission, functions, image, or reputation), agency/entity assets, or individuals.

NIST FIPS 200

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals. Synonymous with Accreditation Authority.

NIST IR 7298

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals. Synonymous with Accreditation Authority. SOURCE: SP 800-53; FIPS 200

NIST IR 7298

Designated Representative - Individual selected by an authorizing official to act on their behalf in coordinating and carrying out the necessary activities required during the security certification and accreditation of an information system. SOURCE: SP 800-37

NIST IR 7328 Draft

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals. Synonymous with Accreditation Authority. [FIPS 200, NIST SP 800-37]

NIST SP 800-18r1

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals. [NIST SP 800-37]

NIST SP 800-37r1 Draft

Authorizing Official - A senior official or executive with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation. [FIPS 200 adapted]

NIST SP 800-37

Authorizing Official - Designated Representative in coordinating and carrying out the necessary activities required Individual selected by an authorizing official to act on their behalf during the security certification and accreditation of an information system.

NIST SP 800-37

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals.

NIST SP 800-39 Draft 2

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals. Synonymous with [[Term:Accreditation Authority | Accreditation Authority]]. [FIPS 200, NIST SP 800-37]

NIST SP 800-53A

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals. Synonymous with [[Term:Accreditation Authority | Accreditation Authority]]. [FIPS 200, NIST SP 800-37]

NIST SP 800-53r1

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals. Synonymous with [[Term:Accreditation Authority | Accreditation Authority]].

NIST SP 800-53r2

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals. Synonymous with [[Term:Accreditation Authority | Accreditation Authority]]. (FIPS 200, NIST SP 800-53r237)

NIST SP 800-53r3

Authorizing Official - A senior (federal) official or executive with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation.

NIST SP 800-60r1V1

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals. Synonymous with [[Term:Accreditation Authority | Accreditation Authority]]. [FIPS 200, NIST SP 800-37]

NIST SP 800-60r1V2

Authorizing Official - Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations (including mission, functions, image, or reputation), agency assets, or individuals. Synonymous with [[Term:Accreditation Authority | Accreditation Authority]]. [FIPS 200, NIST SP 800-37]