Continuous Authorization (cATO)

cATO is an approach where continuous monitoring, real-time evidence, and active drift management keep a system authorized over time, rather than relying on a periodic point-in-time ATO.