Independent prototype. Not a Government of Canada service, not affiliated with it, and not official advice. Always verify anything that matters at the source. How this works

GC Simplified
Security

ATO

Authority to Operate

In plain English

Formal sign-off that a system may run in production, given by whoever accepts the risk of it doing so.

Where you’ll see it

The gate at the end of security assessment. No ATO, no launch.

Example

We are waiting on the ATO.

The build is done and someone senior has not yet accepted the risk of turning it on.

Translate this sentence →

Was this explanation helpful?

Important

GC Simplified is an independent tool, not affiliated with or endorsed by the Government of Canada, and it does not provide official advice. Plain language is an interpretation, and interpretations can be wrong. Always verify against the source and your organization’s own guidance before acting.