N/A, Delegation of Designated Authorizing Official (Franco - EM)

EMERS - 2013-040501 1 (04/2013) ._ Department of Energy Washington, DC 20585 April 5, 2013 MEMORANDUM FOR JOSE R. FRANCO MANAGER FROM: CARLSBAD FIELD OFFICE ;//'' 11/1/ ·P!}NID HUIZENGA f/ '$NIOR ADVISOR FOR ENVIRONMENTAL MANAGEMENT SUBJECT: Delegation of Designated Authorizing Official The Department of Energy (DOE) Order 205.1 B, Department of Energy Cyber Security Program, states that Program Secretarial Officers will serve as the Authorizing Official (AO) for all information systems under their purview. Further, it states that this authority can be further delegated, in accordance with the National Institute of Standards and Technology (NIST) Special Publication 800-37 revision 1, to senior Federal officials within the Program elements under their purview~ You are hereby delegated AO responsibilities for the classified and unclassified systems under the management authority of the Carlsbad Field Office (CBFO). Further delegation of this authority is not allowed. In accordance NIST Special Publication 800-37 revision 1, you may appoint a federal employee as the AO designated representative. The AO designated representative may carry out day-to-day duties tasked to the AO and is empowered to make decisions with regard to planning and the necessary resources required for approving the accreditation. The AO designated representative can represent the AO but cannot accept risk. The AO is the only authorized individual who can accept risk on behalf of the Department and must sign the accreditation granting authority to operate. It is my expectation that the AO or AO designated representative must have technical' system knowledge. The AO and AO designated representative must: (1) hold a security clearance (DOE Q); (2) have knowledge of classified threat data; and (3) complete training within 6 months after appointment. With this Delegation of Authority, you are responsible for the confidentiality, integrity, and availability of information processed, stored and transmitted over and on Information Technology systems under your authority. You are authorized to accept risk for these systems. Further, this delegation includes your authority to grant authority to operate, or to withdraw authority to operate, and suspend the operation for all classified and @ Printed with soy ink on recycled paper ~----- Peggy Text Box 2013-040501 EMERS - 2013-040501 2 (04/2013) unclassified information systems with operational boundaries that are under the jurisdiction of the CBFO. This memorandum rescinds the previous delegation of authority for Edward J. Ziemianski, dated October 12, 2010. cc: Tracy Mustin~ EM-2 Alice Williams, EM-2.1 .Melody Bell, EM-70 Jeanne Beard, EM-72 2