ATO PACKAGE BUILDER HUB · PRACTICE TOOL
Take a system to an ATO.
One RMF step at a time.
Register the Secure By Design enclave in the ATO Package Builder and take it through all seven RMF steps, from naming its roles to the Authorizing Official’s decision and continuous monitoring. Each step links to its lessons and templates in the Training Hub. No account needed: sign in to save your work to your account, or use it without one for a single visit.
THE SEVEN RMF STEPS
Do each step on the network you built.
Pick a step to see its lessons in course 2.1, the same task in the builder, and the templates it uses.
STEP 1 OF 7
Prepare
Name the people who run the system's security program, in writing.
Learn it in the Training Hub
Open the Prepare step in course 2.1Do it in the builder
Register the Secure By Design enclave, describe it and its authorization boundary, and name everyone in an authorization role.
Open the package builderUse its templates
- Official sourcesComing soon
- ISSM, ISSO and ISSE appointment lettersTraining sample
- Program management planTraining sample
The whole course lives in the Training Hub: 2.1, RMF to ATO
What the builder keeps for your enclave
System record and controls
The enclave, its boundary, its roles, its categorization and the controls in scope.
Body of Evidence
Each control’s implementation statement and the evidence linked to it.
POA&M
Every weakness from the assessment, with its milestones.
Approval chain and decision
The ISSM, assessor and Authorizing Official reviews, and the decision with its termination date.
Continuous monitoring
Termination dates, overdue milestones, changes, reassessments and the annual review.
The reviews and the decision are automated practice rules and carry no authority. Enter practice data only.