 On the other hand, accreditation is the process of accepting the residual risks associated with the continued operation of a system and granting approval to operate for a specified period of time.In IT governance, the primary reason why certification and accreditation (C&A) process is being performed on critical systems is to ensure that the security compliance has been technically evaluated.Certified and accredited systems are systems that have had their security compliance technically evaluated for optimal performance in a specific environment and configuration.