The United States African Development Foundation's chief information security officer document and implement a process for assessing risk in internal and cloud service provider’s systems-taking into account all known vulnerabilities and threat sources, security controls planned or in place, and_x000D_ residual risk-to make the authorizing official for each system aware of its security state.