| Both sides previous revision Previous revision | |
| public:99_annexes:annex-b-terms-and-definitions:a:authorizing_authority [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:a:authorizing_authority to public:99_annexes:annex-b-terms-and-definitions:a:authorizing_authority nick_dido | public:99_annexes:annex-b-terms-and-definitions:a:authorizing_authority [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido |
|---|
| ====== Authorizing Authority ====== | ====== Authorizing Authority ====== |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] | [[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] |
| |
| ===== Discussion ===== | ===== Discussion ===== |
| |
| An Authorizing Authority holds the assigned responsibility and authority to evaluate risk and issue, deny, restrict, suspend, or withdraw an [[private:99_annexes:annex-b-terms-and-definitions:o:operational_approval|Operational Approval]] for a defined system, service, facility, organization, or operational capability. | An Authorizing Authority holds the assigned responsibility and authority to evaluate risk and issue, deny, restrict, suspend, or withdraw an [[public:99_annexes:annex-b-terms-and-definitions:o:operational_approval|Operational Approval]] for a defined system, service, facility, organization, or operational capability. |
| |
| The Authorizing Authority considers applicable requirements, implemented controls, assessment results, identified risks, operating conditions, and supporting [[private:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]. The authority records the resulting decision and any associated conditions, restrictions, or period of applicability. | The Authorizing Authority considers applicable requirements, implemented controls, assessment results, identified risks, operating conditions, and supporting [[public:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]. The authority records the resulting decision and any associated conditions, restrictions, or period of applicability. |
| |
| An Authorizing Authority may represent an individual, organizational role, committee, public body, contractual authority, or other governance body with formally assigned decision authority. | An Authorizing Authority may represent an individual, organizational role, committee, public body, contractual authority, or other governance body with formally assigned decision authority. |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] produces controlled artifacts and evidence that support evaluation. Crucible does not act as the Authorizing Authority. | [[public:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] produces controlled artifacts and evidence that support evaluation. Crucible does not act as the Authorizing Authority. |
| |
| ===== Definition ===== | ===== Definition ===== |
| |
| //individual, role, organization, or governance body with assigned authority to evaluate risk and issue, deny, restrict, suspend, or withdraw an [[private:99_annexes:annex-b-terms-and-definitions:o:operational_approval|operational approval]]// | //individual, role, organization, or governance body with assigned authority to evaluate risk and issue, deny, restrict, suspend, or withdraw an [[public:99_annexes:annex-b-terms-and-definitions:o:operational_approval|operational approval]]// |
| |
| ===== Source ===== | ===== Source ===== |