An Analysis of Automated Solutions for the Certification and Accreditation of Navy Medicine Information Assets
NAVAL POSTGRADUATE SCHOOL MONTEREY CA
Pagination or Media Count:
The purpose of this study was to determine potential improvements in Navy Medicines current Certification and Accreditation CA process. The study examined whether Navy Medicines CA policies are in alignment with DoD, Navy and Federal Government requirements and whether the use of automated CA tools could significantly improve Navy Medicines current CA security posture. The primary research reviewed CA policy and included a comparative analysis of two cutting edge automated CA tools namely, Xacta and eMASS. The findings of the analysis revealed that the use of automated CA tools could significantly enhance Navy Medicines CA process and assist Navy Medicines information assurance personnel who are responsible for the execution of the Navy Medicine CA process and approval of Navy Medicine information systems. This study also provided valuable insight in verifying the evidence on how information assurance IA controls are addressed within the automated CA tools regardless of the CA process. The results of the analysis ultimately led to the development of key recommendations that can assist Navy Medicine in selecting the appropriate automated CA tool for its CA process.
- Information Science
- Medicine and Medical Research