QuestionQ49

VerifiedRisk Management

Which person within an organization is responsible for accepting or rejecting the residual risk for a system?

Explanation

The Designated Approving Authority (DAA) is the official authorized to assume responsibility for operating a system at an acceptable level of risk. This role formally accepts or rejects residual risk as part of the authorization decision.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!