What is the difference between an Authorization to Operate (ATO) and an Interim Authorization to Operate (IATO)?
-
A
An ATO is a full authorization; an IATO is a time-limited authorization granted while residual risks are being mitigated
-
B
An ATO is for classified systems; an IATO is for unclassified systems
-
C
An ATO requires FISMA compliance; an IATO does not
-
D
An ATO is issued by the ISSO; an IATO is issued by the AO