ABSTRACT

The culminating event in the certification and accreditation process is accreditation, or the approval by a senior management official for the system to process. The act of signing an accreditation letter for the system is the physical substantiation of upper-level management involvement in assuring the security of the system. The accreditation letter fixes responsibility for the operation of the system. It is the end link in the chain of accountability.