ACS Directive Handbook OCIO-01 Handbook for Information ...

The DAA is recognized as the system owner and the management official with the responsibility to identify the level of acceptable risk for an information system or application and to determine whether the acceptable level of risk has been obtained. DAA responsibilities include: ... Information Assurance Services, in conjunction with the Office ... ................
................