Which of the following roles is also known as the accreditor? Response:

The Chief Risk Officer (CRO) oversees risk management across the organization but is not specifically the accreditor for individual systems.

A Data Owner is responsible for the classification and protection of specific data, not the accreditation of the entire system.

The Designated Approving Authority (DAA) is the official who has the authority to formally assume responsibility for operating a system at an acceptable level of risk. This individual is responsible for making the decision to authorize a system to operate (ATO) and is often referred to as the accreditor because they grant official accreditation based on the system's security posture and risk assessment.

The Chief Information Officer (CIO) manages IT resources and strategy but typically delegates the system-level accreditation decision to the DAA.