Operationalizing Modern Enterprise Capabilities as a Service » ENTERPRISE REPOSITORY MANAGED SERVICES

Success Criteria:
provide application, platform and environment scan data for RMF
provide ATO documentation for RMF (FIPS 199, user and installation guide, configuration and change mgmt plan, PIA, incident response plan, ISCP, rules of behavior, InfoSec Policy, Digital Identity Plan)

Policy documentation is being built, 2 Twelve still waiting on government to give control information to add to SSP. 2 Twelve completed security documentation based on controls we are responsible for. 2 Twelve is responsible for approximately 100 controls, but still waiting on the government to provide approximately 180 controls.

Jacob Halle wrote in #note-5:

Policy documentation is being built, 2 Twelve still waiting on government to give control information to add to SSP. 2 Twelve completed security documentation based on controls we are responsible for. 2 Twelve is responsible for approximately 100 controls, but still waiting on the government to provide approximately 180 controls.

Who are you waiting on from the government to provide these remaining controls?

We have provided documentation to Trajan for these controls. Any documentation on Navy RMF processes will be helpful. We understand its tailored around NIST 800-53 industry standard controls, but the non-technical processes will be helpful also. Thanh will reach back out to Trajan to request.

Can the government get an update on this task?

Jacob, thanks you for the update! I'm not sure I'm tracking what you mean by the related documentation in Deliverable #238 and #240 but they're both lined through.