Hi Gerald,
Here is a copy of the email I sent out earlier this week with an update on SSP and ATO artifacts.
Hi David,
It was brought to my attention that you requested our current status on accreditation for the ORE. Here is an update from the team:
Worked with Trajan:
- 2twelve provided ORE HW/SW spreadsheet (software inventory, boundary diagram, ports/protocols)
- 2twelve provided ORE DADMS requests and Trajan submitted
- 2twelve provided ORE SEISA document and Trajan submitted
Immediate blockers - need government help to unblock:
- Provide ISSO
- Provide ATO/RMF process
- Provide inherited controls and respective control implementation and/or shared responsibility matrix for end state PaaS (Azure Stack)
In progress:
- 2twelve documenting ORE security control implementations in continuous compliance system (regscale)
- 2twelve scanning/ remediating / hardening application code.
We would be happy to discuss further if you have any questions.
