Security Accreditation

Security accreditation is an official management decision given by a senior management to authorize operation of an information system (IS) and to explicitly accept the risk to an organizational operations, assets, and/or individuals based on the implementation of an agreed-upon set of security controls, frameworks, and standards. Moreover, it is the act of management formally accepting an evaluating information system and it is used to formally certify systems in government and military environments.