836A
February 21, 2023
KSATs
836A (NIST ID: N/A)
Task
Authorizing Official only: Determine if the security and privacy risk from operating a system or using a system, service, or application from an external provider is acceptable.
Items denoted by a * are CORE KSATs for every Work Role, while other CORE KSATs vary by Work Role.
Core KSAT for the following Work Roles
No Work Roles with Core KSAT 836A |
Additional KSAT for the following Work Roles
Authorizing Official/Designated Representative (Additional)
Senior official or executive with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation (CNSSI 4009).