Document acceptance of current system risk (ATO)

[lauraGgit]

Document the current security control assessment process and document the accepted risk of the system to formally grant an ATO from a security perspective.