Instructor: Completing the risk management framework 2 2
so you can get your approval to operate is a lot of work. 3 3
It would be great if there was some way to automate it. 4 4
Well, you're in luck, 5 5
because there are several ways to automate your ATO. 6 6
For example, there's a commercial tool called Xacta 360, 7 7
which is made by Telos. 8 8
Now, some federal agencies have actually 9 9
built their own dedicated NIST RMF automation tools, 10 10
such as the US Navy, 11 11
and other federal agencies 12 12
like the Department of the Interior 13 13
use the Cybersecurity Assessment and Management System. 14 14
You could even make your own automated workflow 15 15
by using a product like Microsoft SharePoint web platform. 16 16
And finally, the Department of Defense 17 17
has funded their own tool, and it's called eMASS, 18 18
and that stands for 19 19
Enterprise Mission Assurance Support Service. 20 20
Lots of military branches are using it, 21 21
and more are being required to start using it. 22 22
In the next two videos, we're going to dig deeper into eMASS. 23 23
What is it, and how does it work in the real world? 24 24
And then, we'll take a look at a few risks of using eMASS. 25 25
(light music)