Requirement
[A: M | B: R] The authorizing official must define, document and approve the entity's cybersecurity governance organizational structure, roles and responsibilities, assign the relevant personnel, and provide the support needed to enforce this, taking conflict of interest into account.
