thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

Denial of Authorization to Operate (DATO)

AO decision that the risk of operating a system is unacceptable, so it must not operate or must cease operating.

Definition

A DATO is issued when the authorization package shows unacceptable residual risk. If the system is already operational, operations must stop. Remediation and reassessment are required before a new authorization decision.

Example

A legacy system with unresolved critical findings receives a DATO and is disconnected.

Exam tip

Know the two authorization decisions: authorize or deny.

Related terms