CISSP-ISSEP: Information Systems Security Engineering Professional

The information system owner is accountable for the system’s development, operation, and security documentation, and initiates C&A activities by preparing the system and notifying the appropriate officials. The authorizing official subsequently makes the accreditation decision and accepts the associated risk.