Authority to Operate (ATO) is a process that certifies a system to operate for a certain period of time by evaluating the risk of the system's security controls. ATO is based on the National Institute of Standards and Technology’s Risk Management Framework (NIST 800-37). In this podcast, Shane Ficorilli and Hasan Yasar, both with the Carnegie Mellon University Software Engineering Institute, discuss continuous ATO, including challenges, the role of DevSecOps, and cultural issues that organizations must address.
Change Management: The Security 'X' Factor
CERT Lessons Learned: A Conversation with Rich Pethia, Director of CERT
The ROI of Security
Compliance vs. Buy-in
Why Leaders Should Care About Security
Proactive Remedies for Rising Threats
Create your
podcast in
minutes
It is Free