nerdexam
(ISC)2

CGRC · Question #662

Which of the following is a temporary approval to operate based on an assessment of the implementation status of the assigned IA Controls? Response:

The correct answer is C. IATO. The question asks for the term describing a temporary approval to operate an information system based on an assessment of its Information Assurance (IA) Control implementation.

System Compliance

Question

Which of the following is a temporary approval to operate based on an assessment of the implementation status of the assigned IA Controls? Response:

Options

  • AIATT
  • BATO
  • CIATO
  • DDATO

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    7% (2)
  • C
    85% (23)
  • D
    4% (1)

Why each option

The question asks for the term describing a temporary approval to operate an information system based on an assessment of its Information Assurance (IA) Control implementation.

AIATT

IATT (Interim Authority To Test) is an authorization to conduct testing, not general operation.

BATO

ATO (Authority To Operate) is a formal, full approval to operate a system, not a temporary one.

CIATOCorrect

IATO stands for Interim Authority To Operate. It is a temporary authorization granted for a system to operate while specific security controls are still being fully implemented or validated, allowing the system to proceed with limited operations under certain conditions. This temporary status is based on an initial assessment of the system's security posture and a plan for full compliance.

DDATO

DATO (Denied Authority To Operate) signifies that a system has been denied authorization to operate due to unacceptable risks, not a temporary approval.

Concept tested: Information System Authorization Types

Source: https://www.nist.gov/privacy-framework/glossary-terms#I

Topics

#IATO#Authorization to Operate#RMF Authorization#Temporary Approval

Community Discussion

No community discussion yet for this question.

Full CGRC Practice