Assign a manager as the authorizing manager for the system and for any common controls inherited by the system; ensure that the authorizing manager, before commencing operations: (1) authorizes the system for processing; and (2) authorizes the common controls inherited by the system; and ensure regular updates to authorizations.