Watch this video on YouTube
In NIST SP 800-37, what is the primary purpose of the "Authorize Information System" step in the Risk Management Framework (RMF)?