thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Authorization Package

Set of documents presented to the authorizing official for an authorization decision.

Definition

The package typically contains the system security and privacy plans, security and privacy assessment reports, the plan of action and milestones, and an executive summary. It may also include supply chain risk information and the continuous monitoring strategy. It provides the AO with risk-relevant evidence.

Example

The ISSO compiles the SSP, SAR, and POA&M in eMASS for AO review.

Exam tip

Know the core three: SSP, SAR, POA&M.

Related terms