Question · ATO
How do I get an ATO for a generative AI capability under the AI RCC pilots?
An ATO is the official decision by a senior federal official to authorize operation of an information system and explicitly accept its risk, made after security and privacy controls are assessed under the NIST RMF.
01 / The answer
The short answer
A generative AI capability piloted through DoD's AI Rapid Capabilities Cell still needs an authorization decision under DoD's Risk Management Framework; no separate ATO standard for those pilots could be confirmed. The authorizing official needs a defined system boundary covering the model and its hosting (for commercial cloud, a DISA Provisional Authorization at the right Impact Level), assessed SP 800-53 controls, a plan of action and milestones, and a continuous monitoring plan. For generative AI, add test results on model behaviour and a plan to re-test when the model, prompts or data sources change.
02 / The rule
What ATO requires
An ATO is the official decision by a senior federal official to authorize operation of an information system and explicitly accept its risk, made after security and privacy controls are assessed under the NIST RMF. Any AI system or AI service an agency runs or connects to its data needs to sit inside an authorized boundary, which makes the ATO the gate for federal AI deployments.
- 01Designate senior officials (authorizing officials) to formally authorize systems and common controls.
- 02Complete an initial authorization for each system, based on explicit risk acceptance, before it becomes operational.
- 03Categorize the system, select and implement NIST SP 800-53 controls, and assess them before authorization.
- 04Continuously monitor controls and move to ongoing authorization when eligible.
03 / Records
Records to keep
- 01Signed authorization decision document
- 02System security and privacy plans
- 03Security assessment report
- 04Plan of action and milestones and continuous monitoring reports
Optional evidence · where Planisphere fits
Keep a record anyone can check
When your team meets a duty, Planisphere can seal the event it reports as a receipt.
A disclosure shown, a review signed, a model change approved: the event your system reports.
The event becomes a sealed receipt, dated and attributed to whoever is signed in.
Paste the receipt into Verify. No account or key.
A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.
SOURCES
Go back to the source
Office of Management and Budget
Legal Information Institute (Cornell)
RELATED
Related: ATO: the full guide