The official who has the authority to accept the security safeguards for an information system. The DAA may be responsible for issuing an accreditation statement that records the decision.