thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Authorizing Official (AO)

Senior official with authority to formally assume responsibility and accept risk for operating a system.

Definition

The AO, sometimes called the designated approving authority (DAA) in legacy DoD terminology, must have budgetary oversight or mission responsibility for the system. The AO cannot delegate the authorization decision itself, though a designated representative can carry out other tasks. The AO issues ATO or denial decisions.

Example

The agency CIO serves as AO for the enterprise email system.

Exam tip

The AO decision cannot be delegated; the AO designated representative only supports it.

Related terms