Generate ATO artifacts

From the Authorization package overview record page, generate Authority to Operate (ATO) artifacts in Microsoft Word format. This action enables you to download your ATO artifacts from CAM.

Before you begin

Role required:

• sn_irm_cont_auth.admin
• sn_irm_cont_auth.authorization_official
• sn_irm_cont_auth.info_system_sec_manager
• sn_irm_cont_auth.info_system_sec_officer
• sn_irm_cont_auth.system_owner

Important:

• Set up the ServiceNow Document designer for Word plugin before you create a Microsoft Word template and generate the ATO artifacts reports.

  For more information, see Configuring ATO artifacts report templates.

• Verify using which report type you want to generate the respective ATO artifacts.

  For more information, see Continuous Authorization and Monitoring system properties.

Procedure

1. Navigate to Workspaces > CAM Workspace.
2. To navigate to the Lists page, select the icon.
3. From the Authorization packages in the RMF list, select an authorization package record for which you want to generate the reports.
   Important:

   To generate ATO artifacts, the reports must be in the following state:

   State	ATO artifacts
   Implement, Assess, Authorize, or Monitor	SSP POA&M Note: The repetition property "com.snc.word_doc_api.max_repetitions" in the Document designer plugin must be set to 200 to generate an SSP report successfully. For more information, see Reference information for Document designer. For authorization packages with medium or high data limits, increase the number of records to 200 in the template configuration to generate the SSP report successfully. For more information, see Create content configurations for CAM.
   Assess, Authorize, or Monitor	SAP SAR
   Authorize or Monitor	ATO Letter Executive Summary

4. To generate an SSP report for the package, select Generate SSP.
5. To generate the following report, select from the following options:
   • To generate an SAR report for the package, select Generate SAR.
   • To generate an POA&M report for the package, select Generate POA&M.
   • To generate an SAP report for the package, select Generate SAP.
   • To generate an ATO letter report for the package, select Generate ATO Letter.
   • To generate an Executive Summary report for the package, select Generate Executive Summary.

   

6. Select Proceed.
   After the Microsoft Word file is generated, a banner message states that the report has been generated successfully.

   Note:

   When generating a report from an HTML template, the screen remains displayed after you select Proceed until the report is fully generated.

   When generating a report from a Word template, the Proceed screen disappears, and the report generation takes place in the background.

7. Close the message and select the attachment in the sidebar.
   The Microsoft Word document is also attached to the Authorization section of the package in the Details related list. You can also select the download icon next to the report to download the file.
8. Select the more actions icon () next to the file with a .docx extension and select the Download option.
   Important:

   Verify that the pop-up blocker is turned off for the URL so that the file is automatically downloaded to your local repository.

   The downloaded file opens in a Microsoft Word format with all the details. The report is also attached in the Activity section of the package with the timestamp and the user who generated it.

   From the Implementation step onward, all generated ATO documents for the authorization package are displayed in the Authorization Documents tab.

   To use the functionality of Generate ATO artifacts for an authorization package using the HTML template, see the Configurations Required to Enable Report Generation for Authorization Package in CAM Workspace [KB1649486] article in the Now Support knowledge base.