N/A, Delegation of Designated Approval Authority (Craig - EM)

EMERS Phase I - 2010-101201 1 (10/2010) Department of Energy Washington, DC 20585 October 12, 2010 MEMORANDUM FOR JACK R. CRAIG MANAGER FROM: SUBJECT: CONSOLIDATED BUSIN;ss c~- I J INES R. TRIAY ~ /~ ASSISTANT SECRETARY FOR ENVIRONMENTAL MANAGEMENT Delegation of Designated Approval Authority The Department of Energy Order 205.lA, "Department of Energy Cyber Security Management" states that Heads of Departmental Elements will serve as the Designated Approval Authority (DAA) for all information systems under their control. It further states that this authority can be delegated to Senior Federal officials within the Departmental elements under their purview (but may not be delegated further). Effective October 10, 2010, you are hereby delegated DAA responsibilities for the classified and unclassified systems under the management authority of the Consolidated Business Center (CBC). This includes the Oakland Project Office, West Valley Demonstration Project, Separation Process Research Unit, Moab Project, Consolidated Business Center, and future locations as delegated. Further delegation of this authority is not allowed. You may appoint a Federal employee as the DAA representative. The DAA representative may carry out day-to-day duties tasked to the DAA and is empowered to make decisions with regard to planning and the necessary resources required for Certification of Accreditation. The DAA representative can represent the DAA but cannot accept risk. The DAA is the only authorized individual who can accept risk on behalf of the Department and must sign the accreditation granting Authority to Operate. The DAA or DAA representative must have technical system knowledge. The DAA and DAA representative must: (1) hold a security clearance (DOE Q); (2) have knowledge of classified threat data; and (3) complete training within six months after appointment. With this Delegation of Authority, you are responsible for the confidentiality, integrity, and availability of information processed, stored and transmitted over and on IT systems under your authority. You are authorized to accept risk to these systems. Further this delegation includes your authority to grant Authority to Operate, or to withdraw Authority to Operate, and suspend the operation for all classified and unclassified information systems with operational boundaries that are under the jurisdiction of the CBC. @ Printed with soy ink on recycled paper Peggy Text Box 2010-101201 EMERS Phase I - 2010-101201 2 (10/2010) 2 This memorandum rescinds the previous appointment of Terrance J. Brennan, dated July 28, 2010. cc: Dae Y. Chung, EM-2 Sandra L. Waisley, EM-70 Jeanne M. Beard, EM-72 Stanley P. Wujcik, EM-72 Ward E. Best, CBC Tim Harms, EM-4.1 Wayne K. Whitley, EM-4.1 Joni B. Boone, EM-72