search

opencontrol / discuss

a place to have conversations about OpenControl projects
https://github.com/opencontrol/discuss/issues
Other
16 stars 0 forks source link

What is LATO? #3

Closed pburkholder closed 8 years ago

pburkholder commented 8 years ago

https://github.com/18F/GSA-Certifications/blob/master/LATO.yaml

I've seen this referenced a few places with no context. What is it? The repo doesn't provide any references or information (I can open an issue there if necessary).

jcscottiii commented 8 years ago

LATO stands for lightweight authority to operate. In particular, GSA can offer a LATO to an application / platform, given that the 24 specified controls are implemented. The LATO is time-boxed (although, you can renew for another LATO period)

More reading on it: https://gsablogs.gsa.gov/innovation/2014/12/10/it-security-security-in-an-agile-development-cloud-world-by-kurt-garbars/ https://pages.18f.gov/before-you-ship/ato/types/