Introduction to ATOs

[afeld]

Pleased to announce that I’ve put up a site through OpenControl that’s focused on explaining US federal security compliance processes to those who are new to them:

https://atos.open-control.org/

As I’ve worked in various projects around the ATO process over the past couple of years, I’ve found myself rewriting introductions to ATOs over and over. Most of the material out there is one or more of the following:

• Specific to a particular agency or authorization process
• Specific to a particular product/platform
• Not broadly accessible

The site is a fork of @18F’s Before You Ship site, with the @18F / @GSA -specific bits removed.

Still needs some work - content/design help is welcome! In particular, I’d like to know what in the guide isn’t true at agencies you’ve worked with. Thanks!

[its-a-lisa]

Awesome! Suggest closing considering this announcement is over a year old.