Ask Sage logo


ATO In a Box

Authority to Operate (ATO) Documentation In-A-Box


Looking to create your ATO package and want to accelerate the process while saving time and money?

ATO In a Box can generate your SSP and various documentation for your Authority to Operate. To expedite the review and delivery of software solutions from both commercial and government teams, ATO In a Box has ready-made templates to generate the ATO package.

  • Including:

    IL4 High SSP Addendum v2

    IL5 High SSP Addendum V2

    NIST 800-53 Controls.xlsx

    Appendix-A-FedRAMP-Security-Controls

    High-Moderate-Low-LI-SaaS-Baseline-System-Security-Plan-SSP

    Access Control Policies and Procedures Document

    Audit and Accountability Policy and Procedure

    Awareness & Training Policy and Procedure

    Business Continuity Plan

    CONOPS

    Continuity of Operations-COOP

    Data Classification and Handling Policies

    Data Spill Incident Handling Procedures

    Disaster Recovery Plan

    Employee Training and Awareness Document

    Information Security and Procedures Document

    Information Security Program Plan

    Maintenance Policy and Procedures

    Media Protection Policy and Procedure

    Personnel Security Policy and Procedure

    Physical & Environment Protection Policy and Procedure

    Planning Policy and Procedure

    Risk Assessment and Risk Management Document

    Risk Management Strategy

    Risk Register

    Security Assessment Authorization Policy and Procedure

    Supply Chain Risk Management

    Software Development Life Cycle

    System Communications Protection Policy and Procedure

    System Information Integrity Policy and Procedure

    System Services Acquisition Policy and Procedure

    Change Management Policies and Procedures

    Information System Contingency Plan (ISCP) for System Security Plan

    Configuration Management Plan (CMP) for System Security Plan.docx

    Incident Response Plan Addendum DoD

    Incident Response Plan for the System Security Plan

    Incident Response Plan Tests