Advertisement
Check these out next
The Authorizing Official And The Accreditation Decision
Feb. 10, 2009•0 likes•1,907 views
1 likes
Be the first to like this
Show More
views
Total views
0
On Slideshare
0
From embeds
0
Number of embeds
0
Download to read offline
Report
Technology
Accreditation of US Federal Government IT systems is one of many critical aspects of maintaining an Enterprise Security Program at a Federal Agency. It is a very public metric (think FISMA Report Card.) This has led many to decry Certification and Accreditation (C&A) as strictly a paper exercise. However, when administered correctly, it is probably the best risk management tool available to government executives as it forces the agency to identify/classify systems according to criticality and perform an in-depth examination of every system identified.
Michael SmithFollow
Security Management ConsultantAdvertisement
Advertisement
Advertisement
Recommended
Risk Assessmentaeaguinot
Risk Assessmentaeaguinot
Pragmatic CyberSecurity and Risk ReductionBruce Hafner
Making the Business Case for Security InvestmentRoger Johnston
Risk Management Methodology - CopyRabah Odeh ITIL 5.0-OCP-CISA-PMP-OCP..etc
Pa awwa2006 presentationrev1fin_febWivenhoe Management Group
The Authorizing Official And The Accreditation Decision
- Making the Choice: ATO, IATO, or Denial The Role of the Authorizing Official/Designated Approving Authority and the Accreditation Decision
- IT Security in the SDLC --NIST SP 800-64
- Accreditation Decision Scenarios Playing the “Armchair Authorizer”
Editor's Notes
- The following presentation contains insights and opinions gathered from over 40 years of combined experience in the government INFOSEC space. It’s interspersed with some humor – security presentations can be pretty dry without it. We hope that this presentation will provide you with some insight and understanding of the role of the AO/DAA and the larger process of arriving at an accreditation decision.
Advertisement