Risk Management Framework Self-Assessment Tool (RSAT) Technology Transfer

reportActive / Technical Report | Accesssion Number: AD1222307 | Open PDF

Abstract:

The Cybersecurity Submittal Automation Tool (CySAT) Tool supports Government and Industry stakeholders involved in the Facility Related Control System (FRCS) cybersecurity design requirements and Risk Management Framework (RMF) processes through automation of FRCS Cybersecurity Unified Facility Criteria (UFC) 4-010-06 and RMF Enterprise Mission Assurance Support Service (eMASS) submittals. CySAT has the following features: Design Phase Control Set Automation: generates tailored (with overlays and tailoring options) control and control correlation indicator (CCI) lists as draft UFC Basis of Design and Concept Design Submittals. RMF/eMASS Artifact Automation: facilitates security categorization and auto-populates the Control Information and Test Results forms in eMASS-importable formats to provide initial tailoring of control and CCI sets with overlays, inheritance, and other options.

Author(s):
Keating, Aura L. ; Bush, Joseph
Author Organization(s):
S and C Electric Company; CONSTRUCTION ENGINEERING RESEARCH LAB (ARMY) CHAMPAIGN IL
Funding Organization(s):
ENVIRONMENTAL SECURITY TECHNOLOGY CERTIFICATION PROGRAM ALEXANDRIA VA, ALEXANDRIA, VA
Document Type:
Technical Report/Final Report
Publication Date:
2023 Oct 31
Pagination:
41

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution Code:
A - Approved For Public Release
Distribution Statement: Public Release.
Copyright: Not Copyrighted

RECORD

Collection: TRECMS
Identifying Numbers
Contract Number(s):
W912HQ-22-C-0009
Project Number(s):
Subject Terms
Keyword(s):
cysat (Cybersecurity Submittal Automation Tool), frcs (Facility Related Control System), Cybersecurity Unified Facility Criteria, rmf (Risk Management Framework), FRCS Cybersecurity ufc, ufc (Unified Facility Criteria), emass (Enterprise Mission Assurance Support Service), cci (control correlation indicator), rsat (Risk Management Framework Self-Assessment Tool), operational testing
Subject Categories:
Mathematical and Computer Sciences; Mathematical and Computer Sciences; Mathematical and Computer Sciences
Creation Date:
2024 Feb 29
Update Date:
2024 Mar 28