The United States Capitol under a dramatic sky

Compliance & Authorization

RMF, A&A & Authorization to Operate

NIST Risk Management Framework support from gap analysis through Assessment & Authorization to a full ATO.

Overview

A faster, surer path to your ATO.

CDT embraces the NIST Risk Management Framework across our services. We help you migrate existing systems to RMF, implement and harden the required controls with cost-effective mitigations, and prepare the documentation and artifacts for Assessment and Authorization (A&A). After the assessment, we help remediate findings and Plans of Action & Milestones so you can be granted a full Authorization to Operate.

What's included

Capabilities

Configuration gap analysis

Where your system stands against RMF requirements.

Control implementation

Technical and administrative controls implemented and evidenced.

Authorization packages

System Security Plans, policies and artifacts, including eMASS support.

Assessment support

Preparation for and support during the A&A.

POA&M remediation

Findings resolved to move from interim to full ATO.

How we work

A proven, repeatable process.

1
Gap analysis

We measure where you are against the framework and document every gap, with evidence.
2
Roadmap

A prioritized plan: what to do first, what it takes, and what it will cost.
3
Remediate & document

We implement controls, harden components and write the policies, procedures and system security plans.
4
Assessment support

We prepare you for the assessor or inspector and stand with you through the review.
5
Continuous compliance

Ongoing monitoring and updates keep you compliant after the authorization.