According to NIST , accreditation is the formal authorization by the management official for system operation and an explicit acceptance of risk .
Forma authorization by the management official is not neccessary for accreditation .