Please enable JavaScript.

Coggle requires JavaScript to display documents.

4.7.3 (1) 5.7.3 6.7.3 (End-user Training (Consideration should be given…

- - - - standards,
      - policies
      - processes,
      - procedures,
      - work instructions and guidelines
      - requirements made in support of accreditation.
    - - the extent to which controls are implemented correctly,
      - operating as intended
      - and producing the desired outcome with respect to meeting the system’s security requirements.
    - - reassess the risk
      - update the system security plan,
      - thus providing the factual basis for an authorizing official to render an accreditation decision
  - - - to authorize operation of an information system
      - to explicitly accept the risk to the organization’s operations, assets or individuals based on the implementation of an agreed-upon set of requirements and security controls.
    - - to implement the most effective security controls possible in an information system,
      - given mission requirements,
      - and technical, operational and cost/schedule constraints
    - - Thus, responsibility and accountability are core principles that characterize accreditation.