What is the purpose of the Authorization Decision Document (ADD)?

• A. To implement security controls across the system.
• B. To document the system architecture and data flows.
• C. To communicate the authorization decision and any residual risk to stakeholders.
• D. To replace the Risk Assessment Report.

Answer: (C)