These diagrams show the NCI A&A process to complete the normal* FISMA ATO process.
The first diagram is for NCI internal systems in CBIIT Managed hosting:
The second diagram is for 3rd party/contractor hosted external systems as well as systems in CBIIT Customer Managed or Co-located (Colo) hosting:
*This excludes the streamlined ATO process, also known as ATO as a Service (ATOaaS) and the low-impact software as a service (LI-SaaS) approval processes.
NCI CBIIT Hosting Models Graphic
This graphic depicts the three hosting options within the NCI Center for Bioinformatics and Information Technology (CBIIT) as well as the breakdown of CBIIT and Customer responsibilities for each option.