dispositioning authority

person or a group of persons with assigned responsibility and authority to make decisions on the configuration (3.10.6)

Note 1

Relevant interested parties (3.2.3) within and outside the organization (3.2.1) should be represented on the configuration authority.