CWMS-ATO

Overview

The Authority to Operate (ATO) process enables CWMS software to function within the G6 infrastructure. Without an active ATO, servers would be decommissioned, requiring district offices to seek alternative methods to fulfill their water management responsibilities. The ATO is an ongoing process, with a comprehensive formal assessment conducted every three years by a Security Control Assessor-Validator (SCA-V) team. To maintain compliance, the team continuously monitors updates to Security Technical Implementation Guides (STIGs) issued by the Defense Information Systems Agency (DISA) and ensures that CWMS software is developed and operated in a secure and compliant manner.

Accomplishments

Maintaining the ATO is a continuous process, records were updated as needed.