An organization has developed a major application that has undergone accreditation testing. After
receiving the results of the evaluation, what is the final step before the application can be
accredited?

A.
Acceptance of risk by the authorizing official

B.
Remediation of vulnerabilities

C.
Adoption of standardized policies and procedures

D.
Approval of the System Security Plan (SSP)