Hey everyone, so I work for a major cloud provider and have been tasked with learning all about ATOs to better help mission owners onboard into enterprise cloud offerings. Can someone explain to me start to finish how I representing the cloud provider, is supposed to help mission owners onboard? I have a pretty rough idea of what I should be doing like, providing PPSM, HW/SW lists, test plans, then selecting controls and going line by line. This is all I really “know” but not sure what this looks like from a hands on perspective, like what am I spending my time doing exactly? What is the output of the categorization step, I know there’s low, moderate, high. But what exactly is that being mapped too, data types? The entire system? Like what is considered low, moderate, or high? I know that’s a lot but thanks everyone for the support.
[link] [comments]