Authorization to Operate (ATO)

An ATO is the formal decision by an Authorizing Official (AO) to accept the risk of operating a system, based on its security posture and evidence.

ATOauthorization to operateRMFfederalrisk