authorization to use

{
  "id": "MLC-T-CYB-000348",
  "term": "authorization to use",
  "field": "Cybersecurity",
  "definition": "The official management decision given by an authorizing official to authorize the use of an information system, service, or application based on the information in an existing authorization package generated by another organization, and to explicitly accept the risk to agency operations (including mission, functions, image, or reputation), agency assets, individuals, other organizations, and the Nation based on the implementation of an agreed-upon set of controls in the system, service, or application.",
  "references": [
    "NIST SP 800-37 Rev. 2",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/authorization-to-use/"
}