Authorizing Official only: Determine if the security and privacy risk from operating a system or using a system, service, or application from an external provider is acceptable.

Work roles that include this task

• CS-611 additional Authorizing Official/Designated Representative
• CS-612 additional Security Control Assessor