Organizations implement safeguards and countermeasures to protect information resources from risks. One of the following is an administrative safeguard family implemented by the management of an organ

Certification and accreditation (C&A), now generally referred to as the Authorization step in the NIST Risk Management Framework (RMF), is an administrative safeguard family because it is a formal management decision process. It involves management review, approval, and acceptance of residual risk for an information system to operate within an organizational environment. This process establishes accountability, ensures adherence to policies, and leverages management's authority to make informed decisions about system security and operational authorization, making it a critical administrative control.

Encryption and integrity checks are technical safeguards that use algorithms and software to protect data, not administrative processes.

FIPS 199 and NIST SP 800-37 are standards and frameworks, respectively, not safeguard families themselves.

Implementation and Assessment are phases or activities within the security lifecycle, not a family of administrative safeguards.