Authority to Operate (ATO) definition

Authority to Operate (ATO) means the official management decision given by a senior organizational official to authorize operation of an information system and to explicitly accept the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation based on the implementation of an agreed-upon set of security controls.
View Source

Examples of Authority to Operate (ATO) in a sentence

  • This agreement will remain in effect based on the life of the Authority to Operate (ATO) for IPAWS-OPEN or a maximum of three (3) years after the last date on either signature in the signature block below.

  • The Contractor shall not input, store, process, output, and/or transmit sensitive information within a Contractor IT system without an Authority to Operate (ATO) signed by the Headquarters or Component CIO, or designee, in consultation with the Headquarters or Component Privacy Officer.

  • Security documentation shall, at a minimum, provide the results of applying the applicable STIGs. The contractor shall conduct ongoing vulnerability/compliance scans of SRPWeb Portal host servers per DoD and Army policy, guidance, and directives for maintaining applicable IA controls compliance to current Authority to Operate (ATO) standards.

  • FEMA, HUD, and CDBG-DR grantees will ensure that any cloud-based system that stores, analyzes, processes, or uses FEMA and/or HUD PII has an Authority to Operate (ATO) approved by the Federal Risk and Authorization Management Program (FedRAMP).

  • The MTW Expansion application is hosted in the Salesforce Government Cloud (Gov Cloud), which has a FedRAMP Moderate Authority to Operate (ATO) and Department of Defense Impact Level 4 Provisional Authorization (PA).

  • The Authority to Operate (ATO) permits Agency personnel to understand and accept the Risk of the status of the System at the time of deployment into Production.

  • For the term of this Contract, Contractor will maintain a provisional Authority to Operate (ATO) at the Moderate Level from the Federal Risk and Authorization Management Program (FedRAMP) Joint Authorization Board (JAB) or Federal Agency for any and all Cloud Services provided under this Contract.

  • The TAXII Server received a three-year Authority to Operate (ATO) on January 19, 2016.

  • The Vendor must receive a NARA Authority to Operate (ATO) before the system can be used in production.

  • VA will provide CMS with VA’s electronic files via the CMS Acumen Portal, a secured transmission pathway that has been given an Authority to Operate (ATO) and that is to be used as a means to transition the file to and from CMS.