Certification and Accreditation (C&A)

A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Abbreviation(s) and Synonym(s):

Approval to Operate

NIST SP 800-57 Part 1 Rev. 3

C&A

CNSSI 4009-2015, NIST SP 800-100, NIST SP 800-115, NIST SP 800-35, NIST SP 800-55, NIST SP 800-55 Rev. 1, NIST SP 800-65, NIST SP 800-66 Rev. 1

Definition(s):

seeCertificationandAccreditation.
Source(s):
NIST SP 800-16 under Approval to Operate

Certification involves the testing and evaluation of the technical and nontechnical security features of an IT system to determine its compliance with a set of specified security requirements. Accreditation is a process whereby a Designated Approval Authority (DAA) or other authorizing management official authorizes an IT system to operate for a specific purpose using a defined set of safeguards at an acceptable level of risk.
Source(s):
NIST SP 800-47 [Superseded]

Glossary Comments

Comments about specific definitions should be sent to the authors of the linked Source publication. For NIST publications, an email is usually found within the document.

Comments about the glossary's presentation and functionality should be sent to secglossary@nist.gov.

See NISTIR 7298 Rev. 3 for additional details.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Certification and Accreditation (C&A)

Glossary Comments