Definition

The official management decision given by an authorizing official to authorize the use of an information system, service, or application based on the information in an existing authorization package generated by another organization, and to explicitly accept the risk to agency operations (including mission, functions, image, or reputation), agency assets, individuals, other organizations, and the Nation based on the implementation of an agreed-upon set of controls in the system, service, or application.

Source

NIST SP 800-37 Rev. 2

NESDIS Data Management Lexicon and Related Terms

Category

4. Data Stewardship words