What happened
CSET published a report by Katherine Carroll (former U.S. Space Force Fellow) arguing that the federal government's Authorization to Operate (ATO) process — the formal mechanism for approving software systems, including AI-enabled systems, for military use — remains a major barrier to fielding advanced technology despite over a decade of reform efforts. The report is described as 'the first analysis to examine not only the process itself but the foundational legal authorities, competing stakeholder incentives, and governance structures that collectively produce delays.' It offers a prioritized set of recommendations, including publicly releasing critical controls and authorizing-official authorities, and using AI to standardize ATO documentation into machine-readable formats to speed reciprocity across services. Published August 2026 (referenced via CSET's August 12, 2026 announcement).
Why it matters
For defense-sector CISOs, acquisition leaders, and policymakers, this identifies concrete, prioritized levers (transparency of AO authorities, AI-assisted standardization of compliance documentation) to cut the time between commercial AI/software innovation and secure fielding — a persistent friction point cited as contributing to real-world operational and safety costs.
Action needed
Defense technology and compliance leaders should map the report's recommendations (AO authority transparency, AI-standardized RMF submissions) against their own ATO/reciprocity bottlenecks and assess applicability to accelerating AI system authorization.