Deliverable #238: ATO artifacts - ENTERPRISE REPOSITORY MANAGED SERVICES - AGILE DEVELOPMENT

Actions

Copy link

Deliverable #238

closed

ATO artifacts

Added by Jacob Halle almost 2 years ago. Updated over 1 year ago.

Status:

Closed

Priority:

Normal

Assignee:

Start date:

08/03/2022

Due date:

08/02/2023

% Done:

100%

Estimated time:

Description

3.3.32.9 ATO artifacts

Files

Download all files

DADMS NewAdd_NewVersion_UICAssociation Questionnaire ORE 20230309.xlsx (122 KB) DADMS NewAdd_NewVersion_UICAssociation Questionnaire ORE 20230309.xlsx		Jacob Halle, 07/25/2023 07:28 PM
HWSW_NDP_ORE_20230127v2 (1).xlsx (152 KB) HWSW_NDP_ORE_20230127v2 (1).xlsx		Jacob Halle, 07/25/2023 07:28 PM
ORE_SEISA_20230421.docx (742 KB) ORE_SEISA_20230421.docx		Jacob Halle, 07/25/2023 07:28 PM
Regscale screenshot.png (523 KB) Regscale screenshot.png		Jacob Halle, 07/25/2023 07:29 PM

Related issues

Actions

Copy link

Updated by Jacob Halle almost 2 years ago

Status changed from New to In Progress
% Done changed from 0 to 80

Actions

Copy link

Updated by Jacob Halle almost 2 years ago

Related to Deliverable #240: SSP artifacts added

Actions

Copy link

Updated by Jacob Halle almost 2 years ago

Tracker changed from Feature to Deliverable

Actions

Copy link

Updated by Oscar Robertson over 1 year ago

We see that this task is related to SSP artifacts, how does 2Twelve intend on meeting this requirement? What EXACTLY is the requirement?

What items are 2Twelve waiting on the Government?

Actions

Copy link

Updated by Jacob Halle over 1 year ago

Hi Gerald,
Here is a copy of the email I sent out earlier this week with an update on SSP and ATO artifacts.

Hi David,
It was brought to my attention that you requested our current status on accreditation for the ORE. Here is an update from the team:

Worked with Trajan:
- 2twelve provided ORE HW/SW spreadsheet (software inventory, boundary diagram, ports/protocols)
- 2twelve provided ORE DADMS requests and Trajan submitted
- 2twelve provided ORE SEISA document and Trajan submitted

Immediate blockers - need government help to unblock:
- Provide ISSO
- Provide ATO/RMF process
- Provide inherited controls and respective control implementation and/or shared responsibility matrix for end state PaaS (Azure Stack)

In progress:
- 2twelve documenting ORE security control implementations in continuous compliance system (regscale)
- 2twelve scanning/ remediating / hardening application code.

We would be happy to discuss further if you have any questions.

Actions

Copy link