Documentation Glossary

ATO

Authority to Operate approval process in regulated environments.

RMF

Risk Management Framework process for selecting and assessing security controls.

NIST 800-171

Security requirements for protecting controlled unclassified information.

Policy as Code

Machine-readable policy rules applied during software delivery workflows.

Traceability

Ability to map requirements, changes, tests, and approvals through lifecycle artifacts.