Streamlining AI Compliance: A Proposal for a Rapid ATO in Federal Business

by: Mitchell Sutika-Sipus, Chief Solutions Architect

Any technology company providing solutions to the US government must undergo a rigorous review and security process to acquire an Authority to Operate (ATO). The ATO process is long and expensive, often taking years and millions of dollars to ensure that the solution meets federal security standards and complies with various laws. Similarly, government contractors are often stressed by the constant need to meet security regulations, and when new technologies are required, the safest path is to acquire solutions that already have an ATO.

When technologies change extremely fast – like in the case of A.I., – this business model is ineffective. Government agencies find themselves reliant upon continually outdated and often inadequate software. By default, federal contracting companies end up in the same situation.

To benefit the US government and economy AutogenAI has formally recommended The White House Office of Science and Technology Policy an alternative path to fast track AI solutions for federal compliance. As a Rapid AI ATO, we suggest a distinction is made between companies that directly service the federal government and those that support the federal industrial base. We have also recommended approvals may be contingent on the use of previously applied infrastructure components. For example, at AutogenAI, we offer our solution within AWS environment that satisfies all IL-5 technical controls AND we only deploy LLMs with FedRamp certification. Under the Rapid AI ATO, this architecture when compounded with 3rd party assessment for NIST criteria could be sufficient to satisfy all Federal Contractor requirements. This approach accelerates the adoption of technology and broadly benefits to the US economy.