BaselineWatch
Desk

2.6.2 Designated Authorizing Official (DAO) (was: Designated Accreditation Authority)

NIST PIV and digital identity SP 800-79-2 against SP 800-79-1
All changes in this version
modified 2 PREPARATION FOR ASSESSMENT AND AUTHORIZATION part of 2.6

Title changed

Before · SP 800-79-1

Designated Accreditation Authority

After · SP 800-79-2

Designated AccreditationAuthorizing AuthorityOfficial (DAO)

Control changed

Before · SP 800-79-1

The Designated Accreditation Authority (DAA) is an official of the organization with the authority to review all assessments of a PCI and its facilities, and to accredit the PCI as required by HSPD-12. Through accreditation, the DAA accepts responsibility for the operation of the PCI at an acceptable level of risk to the organization. The SAO can also fulfill the role of the DAA.

After · SP 800-79-2

The Designated Accreditation Authority (DAA) is anAuthorizing officialOfficial ofhas the organizationauthority withwithin thean authorityorganization to review all assessments of aan PCIissuer and its facilities, and to accreditprovide thean PCIauthorization decision as required by [HSPD-12] . Through accreditationauthorization, the DAADAO accepts responsibility for the operation of the PCIissuer at an acceptable level of risk to the organization. The SAO canmay also fulfill the role of the DAADAO. The DAO shall not assume the role of the OIMO.