Authorizing Official
In information security, an Authorizing Official (AO) is a senior executive responsible for evaluating and accepting the residual risks of an information system. The AO grants formal authorization for the system to operate, ensuring it meets security requirements and aligns with organizational risk tolerance.