System Authorization is the risk management process. System Authorization Plan (SAP) is a comprehensive and uniform approach to the System Authorization Process. What are the different phases of Syste

Post-Authorization is a valid SAP phase covering ongoing monitoring and maintenance of the authorization after it is granted.

Pre-certification is the initial SAP phase where the system and its security posture are prepared and documented before formal certification begins.

Post-certification is not a defined phase in the System Authorization Plan - the phase following Certification is called Authorization, not Post-certification.

Certification is the formal technical evaluation phase that assesses whether security controls meet requirements.

Authorization is the phase where the Designated Approving Authority (DAA) makes the official risk acceptance decision based on certification findings.