Accreditation

There are two requirements to be satisfied:

1. Issuers must be Accredited (Requirement 93)
2. IT Systems must be Accredited (Requirement 94)

The draft SP 800-37 and the recently published SP 800-79-1 removed the "Certification" from both documents.