Delegation of Designated Approval Authority Savannah River Operations Office (EM)

Department of Energy Washington, DC 20585 October 12,2010 MEMORANDUM FOR DAVID C. MOODY MANAGER SAVANNAH RIVER OPERATIONS 0 FICE I FROM: INES R. TRIA Y ~ SUBJECT: ASSIST ANT SECRETARY FOR ENVIRONMENTAL MANAGEMENT Delegation of Designated Approval Authority The Department of Energy Order 205.1 A, "Department of Energy Cyber Security Management'' states that Heads of Departmental Elements will serve as the Designated Approval Authority (DAA) for all information systems under their control. It further states that this authority can be delegated to senior Federal officials within the Departmental elements under their purview (but may not be delegated further). · Effective October 10,2010, you are hereby delegated DAA responsibilities for the classified and unclassified systems under the management authority of·SavaiUlah River Site. Further delegation of this authority is not allowed. You may appoint a Federal employee as the DAA representative. The DAA representative may carry out day-to-day duties tasked to the DAA and is empowered to make· decisions with regard to planning and the necessary resources required for Certification of Accreditation. The DAA representative can represent the DAA but cannot accept risk. The DAA is the only authorized individual who can accept risk on behalf of the Department and must sign the accreditation granting Authority to Operate. The DAA or the DAA representative must have technical system knowledge. The DAA and DAA representative must: (1) hold a security clearance (DOE Q); (2) have knowledge of classified threat data; and (3) complete training within six months after appointment. With this Delegation of Authority, you are responsible for the confidentiality, integrity, and availability of information processed, stored and transmitted over and on Information Technology systems under your authority. You are authorized to accept risk to these systems. Further this delegatiQn includes your authori:ty to gran~ Authority to .Operate, or to withdraw Authority to Operate and suspend the operation for all classified and unclassified information systems with operational boundaries that are under the jurisdiction of the Savannah River Site. * Printed with_so~ Ink on recycled pa.per This memorandum rescinds the previous appointment of Jack R. Craig, dated March 12,2010. cc: Dae Y. Chung, EM-2 Sandra L. Waisley, EM-70 Jeanne M. Beard, EM-72 Stanley P. Wujcik, EM-72 Francis H. Plumley, SRS Tim Hanns, EM-4.1 Wayne K. Whitley, EM-4.1 Joni B. Boone, EM-72 2 i.