We recommend that NARA incorporate the wireless network into its RMF process by performing the following SA&A tasks: authorize network operation based on a determination of the risk to organizational operations and assets, individuals, other organizations, and the Nation resulting from the operation of the information system and the decision that this risk is acceptable.