Which of the following persons in an organization is responsible for rejecting or accepting the residual risk for a system
System Owner
Information Systems Security Officer (ISSO)
Designated Approving Authority (DAA)
Chief Information Security Officer (CISO)
Submit