26.  Standard of Risk

Comment: The respondent recommended that any final rule establish a clear, simple, and uniform standard of risk to the Government in the procedures that are applicable across all of the business systems.

Response: The definition of a significant deficiency establishes a uniform standard of risk. A significant deficiency is defined as a shortcoming in the system that materially affects the ability of officials of the Department of Defense to rely upon information produced by the system that is needed for management purposes.