Independent prototype. Not a Government of Canada service, not affiliated with it, and not official advice. Always verify anything that matters at the source. How this works

GC Simplified
Security

SA&A

Security Assessment and Authorization

In plain English

The process of assessing a system's security and formally accepting the remaining risk before it goes live.

Where you’ll see it

IT security. The authorization step is a named person accepting risk.

Was this explanation helpful?

Important

GC Simplified is an independent tool, not affiliated with or endorsed by the Government of Canada, and it does not provide official advice. Plain language is an interpretation, and interpretations can be wrong. Always verify against the source and your organization’s own guidance before acting.