CGRC · Question #662
Which of the following is a temporary approval to operate based on an assessment of the implementation status of the assigned IA Controls? Response:
The correct answer is C. IATO. The question asks for the term describing a temporary approval to operate an information system based on an assessment of its Information Assurance (IA) Control implementation.
Question
Which of the following is a temporary approval to operate based on an assessment of the implementation status of the assigned IA Controls? Response:
Options
- AIATT
- BATO
- CIATO
- DDATO
How the community answered
(27 responses)- A4% (1)
- B7% (2)
- C85% (23)
- D4% (1)
Why each option
The question asks for the term describing a temporary approval to operate an information system based on an assessment of its Information Assurance (IA) Control implementation.
IATT (Interim Authority To Test) is an authorization to conduct testing, not general operation.
ATO (Authority To Operate) is a formal, full approval to operate a system, not a temporary one.
IATO stands for Interim Authority To Operate. It is a temporary authorization granted for a system to operate while specific security controls are still being fully implemented or validated, allowing the system to proceed with limited operations under certain conditions. This temporary status is based on an initial assessment of the system's security posture and a plan for full compliance.
DATO (Denied Authority To Operate) signifies that a system has been denied authorization to operate due to unacceptable risks, not a temporary approval.
Concept tested: Information System Authorization Types
Source: https://www.nist.gov/privacy-framework/glossary-terms#I
Topics
Community Discussion
No community discussion yet for this question.