Watch the explanation. Practice the skill.
ATO and FedRAMP for AI systems
Check the whole system’s authorization boundary.
Captions appear here during playback.
ATO and FedRAMP for AI systems
Check the whole system’s authorization boundary.
Video playback is unavailable. Read the descriptive transcript below, go directly to practice, or open the video file.
Source-based teaching example · Fictional data · Reviewed 2026-10-03. Microsoft Mark · locally synthesized. On a small screen, use fullscreen for diagram details or read the transcript.
Read the descriptive transcript
0:00 · What you will learn
Check the whole system’s authorization boundary.
What appears on screen
Check the whole system’s authorization boundary.
0:05 · The idea
List every service and data flow in the proposed system. Evidence for one cloud service does not automatically cover another service or your application. Approval belongs to the responsible authority.
What appears on screen
List every service and data flow in the proposed system. Evidence for one cloud service does not automatically cover another service or your application. Approval belongs to the responsible authority.
0:20 · One useful term
ATO. Authority to Operate: an authorization decision for a defined system and scope.
What appears on screen
Authority to Operate: an authorization decision for a defined system and scope.
0:29 · A worked example
Harbor Notes uses infrastructure, a separate model API and separate logging. The infrastructure’s listing cannot authorize the other services or the whole app. The operational data and agency decision remain unresolved.
What appears on screen
Harbor Notes uses infrastructure, a separate model API and separate logging. The infrastructure’s listing cannot authorize the other services or the whole app. The operational data and agency decision remain unresolved.
0:47 · Your turn to think
Does an infrastructure listing approve all connected services? Pause and decide before continuing.
What appears on screen
Does an infrastructure listing approve all connected services? Pause the video if you need more time.
1:04 · Why this answer works
No. Review each exact service, configuration and data requirement. Passing a classroom mock does not issue authorization.
What appears on screen
No. Review each exact service, configuration and data requirement. Passing a classroom mock does not issue authorization.
1:16 · Check 1
Include every service and flow.
What appears on screen
Include every service and flow.
1:21 · Check 2
Check the exact offered service and configuration.
What appears on screen
Check the exact offered service and configuration.
1:27 · Check 3
Leave unresolved approval questions visible.
What appears on screen
Leave unresolved approval questions visible.
1:33 · Now try a different case
Open the lesson and try its different practice case. Use every check in the full task. Watching alone does not mark the lesson complete.
What appears on screen
Open the lesson Try the new case Check and revise The full task and its requirements are in the linked lesson.
Watching explains the example. Complete the lesson practice to check what you can do. Explore all visual lessons →