Skip to main content

Victoria Yan Pillitteri

Sep 22, 2026

37:50
Tell me how you think about moving from an ATO where it's point in time, perhaps in a historical review of practices, gives you a license to practice that or deliver that software over a future period of time and something more in the moment where or more iterative continuous monitoring.
38:10
So interestingly enough, I think that's actually a common misperception of ATOs.
38:15
Now, obviously, this concept has existed for 20 plus years and has been kind of a cornerstone of federal cybersecurity programs.
38:25
You get your authorization to update, operate, and you're good to go for some set period of time.
38:30
There's actually been a push, a long-term push over the last 15 or so years to move from that point in time, I'm good, to an ongoing near real-time continuous monitoring approach to authorization.
38:44
Because again, it goes back to one of the foundational principles we started with today is the only constant that we can expect in the cybersecurity world, in the IT world is change.
38:55
The threat constantly changes minute by minute, second by second.

6 MINS LATER

45:16
Yeah.

We value your privacy

We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.