Accreditation

Go up to Terms and Definitions

Accreditation establishes formal recognition that a defined system, service, facility, organization, or operational capability satisfies specified criteria within a defined scope and operating context.

An accreditation process evaluates applicable requirements, implemented controls, identified risks, assessment results, operating procedures, and supporting Evidence. The resulting determination applies to the defined Accreditation Boundary.

An Authorizing Authority uses the accreditation determination and supporting evidence when issuing an Operational Approval.

Accreditation differs from compliance. Compliance identifies conformity with specified requirements or criteria. Accreditation records formal recognition by an authorized body within a defined scope and context.

formal recognition that a defined entity satisfies specified criteria within a defined scope and operating context

Generalised from conformity assessment, security accreditation, and risk management usage, and specialized for the Crucible architecture and operational model.

Accreditation applies only to the entity, boundary, configuration, criteria, and operational context identified in the accreditation decision.

A change to the approved boundary, configuration, implemented controls, operating processes, or operational context may affect the continued applicability of the accreditation.

An Authorizing Authority reviews the controls, risks, assessment results, operating procedures, and evidence of compliance associated with a defined Software Factory. The resulting accreditation records formal recognition that the factory satisfies the specified criteria within its approved Accreditation Boundary.