Accreditation is the final step in the process and officially makes an agency responsible for the system’s security. If a security breach occurs, the agency is accountable for any adverse impacts.