According to NIST , accreditation is the formal authorization by the management official for system operation and an explicit acceptance of risk .
Except defining terms , NIST also issues regular check-ups on companies to see if they break the law .