Unpacking the Authority to Operate (ATO) Process: Implications for the DoD

Abstract

Many of the novel technologies that the DoD seeks to leverage include software that needs to connect to the government’s network. An important part of transitioning these novel technologies is ensuring that the technology can connect to the government’s network in a timely and seamless manner. This is facilitated through the Authority to Operate (ATO) process. It is imperative that the DoD has a thorough understanding of the internal challenges and bottlenecks within the ATO process to identify opportunities for easing the navigation process for DoD members and new companies seeking to offer their novel technology to the Defense market. To this end, this study focuses on the Department of the Air Force’s (DAF) ATO process and examines how the lessons learned from the DAF can be applied to the DoD. Through an analysis of the extant literature on the current state of the ATO process, semi-structured interviews with stakeholders inside and outside the DAF, and the creation of a detailed visualization of the ATO process, a set of recommendations for improving the ATO process are presented. Additionally, several research initiatives have emerged to enhance the DAF’s understanding of the ATO process, its effectiveness, and security model evolution.