AO Decision Letter

Status: Original and derived artifacts are available for this document.

Download: pdf

Reset
Public Health Service
Centers for Disease Control
and Prevention (CDC)

DEPARTMENT OF HEALTH & HUMAN SERVICES

Memorandum
Date

05/27/2025

From

Steve Warren

Subject

Security Authorization Decision (Authorization to Operate) for the

, Authorizing Official

CDC OPHDST 1 CDC Data Platform
( ICDP
To

Moderate
) (_________________)

Stephen Soroka, Special Advisor for Health Science Informatics
Based on the results of the security assessment of the ICDP
and its
constituent system-level components located throughout the CDC and the supporting
evidence provided by the successful security risk assessment and the Plan of Action and
Milestones (POA&M), I have determined that the risk to agency operations, agency
is
assets, or individuals resulting from the operation of ICDP
acceptable. Accordingly, I am issuing an authorization to operate to
ICDP
in its existing operating environment until 08/16/2026
.
ICDP
is authorized without any significant restrictions or limitations.
This security authorization is my formal declaration that adequate security controls have
been implemented in ICDP
and that a satisfactory level of security is
present in the system.
Controls for this system must be reviewed annually in accordance with the requirements
detailed in the Federal Information Security Modernization Act of 2014. Modifications to
the system will be reviewed via a security impact analysis and, if identified as making
major changes to the overall system that affects the security controls or general
architecture, the system may be required to undergo a re-assessment and potential reauthorization to maintain a level of its assurance to operate and process data on CDC
networks.
PALANTIR FEDERAL CLOUD SERVICE
FR1912671248
ICDP
________
leverages _________________________
/ ___________________________
SaaS
__________________________________
/ ___________________________________
A copy of this letter with all supporting security authorization documentation should be
retained in accordance with the CDC records retention schedules.

X

signed by Steven C.
Steven C. Warren Digitally
Warren -S
Date: 2025.05.27 08:41:16 -04'00'
-S

Steve Warren

Authorizing Official