Authority to Operate (ATO) is a process that certifies a system to operate for a certain period of time by evaluating the risk of the system's security controls. ATO is based on the National Institute of Standards and Technology’s Risk Management Framework (NIST 800-37). In this SEI podcast, Shane Ficorilli and Hasan Yasar discuss continuous ATO, including challenges, the role of DevSecOps, and cultural issues that organizations must address.


The SEI Podcast Series is available on

Apple Podcasts: [ Ссылка ]
Google Podcasts: [ Ссылка ]
TuneIn: [ Ссылка ]
SoundCloud: [ Ссылка ]
Stitcher: [ Ссылка ]

свернуть