These diagrams show the NCI A&A process to complete the normal* FISMA ATO process.
The first diagram is for NCI internal systems in CBIIT Managed hosting:
The second diagram is for external systems, which includes 3rd Party/Contractor-Hosted systems as well as systems in CBIIT Customer Managed or Co-located (Colo) hosting environments:
*This excludes the streamlined FAST ATO process and the low-impact software as a service (LI-SaaS) approval processes.
NCI CBIIT Hosting Models Graphic
This graphic depicts the three hosting options within the NCI Center for Bioinformatics and Information Technology (CBIIT) as well as the breakdown of CBIIT and Customer responsibilities for each option.