Default classification

The certifier’s statement provides an overview of the security status of the system and brings together all of the information necessary for the DAA to make an informed, riskbased decision. The statement documents that the security controls are correctly implemented and effective in their application. The report also documents the security controls not implemented and provides corrective actions.
[view]

A statement of the certification authority’s practices with respect to a wide range of technical, business, and legal issues that can be used as a basis for the certification authorities contract with the entity to whom the certificate was issued.
[view]

A test method of satisfying the criterion that each statement in a program be executed at least once during the program testing.
[view]

Temporary approval granted by a DAA for an IS to process information based on preliminary results of a security evaluation of the system. Temporary authorization granted by a DAA for an information system to process information based on preliminary results of a security evaluation of the system.
[view]

An individual who makes a classification determination and applies a security classification to information or material. A classifier may either be a classification authority or may assign a security classification based on a properly classified source or a classification guide.
[view]