nerdexam
(ISC)2

CAP · Question #325

Which of the following is a temporary approval to operate based on an assessment of the implementation status of the assigned IA Controls?

The correct answer is C. IATO. IATO stands for Interim Authorization to Operate. It is a temporary approval granted to a system to operate for a limited period, typically when the system has not yet fully met all security requirements. It is specifically based on an assessment of how far along the system is…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following is a temporary approval to operate based on an assessment of the implementation status of the assigned IA Controls?

Options

  • AIATT
  • BATO
  • CIATO
  • DDATO

How the community answered

(28 responses)
  • A
    4% (1)
  • C
    89% (25)
  • D
    7% (2)

Explanation

IATO stands for Interim Authorization to Operate. It is a temporary approval granted to a system to operate for a limited period, typically when the system has not yet fully met all security requirements. It is specifically based on an assessment of how far along the system is in implementing its assigned Information Assurance (IA) Controls. By contrast: ATO (Authorization to Operate) is the full, permanent authorization; IATT (Interim Authority to Test) is a temporary permission specifically for testing purposes only, not full operation; DATO (Denial of Authorization to Operate) is issued when a system is found to pose unacceptable risk and must not be operated. The 'temporary' and 'implementation status' criteria in the question point directly to IATO.

Topics

#IATO#Authorization to Operate#RMF#Temporary Approval

Community Discussion

No community discussion yet for this question.

Full CAP Practice