Prepare system documentation for assessment in accordance with the Risk Management Framework (RMF) and NIST Special Publications (800-37, 800-53 and others).
April 08, 2020
Develop and update security control traceability matrices (SCTMs) and system security plans (SSPs), manage and control changes to systems and assessment and authorization (A&A) packages, and assess the security impact of those changes.
May 02, 2020
Support the customer information assurance vulnerability management (IAVM) program requirements and ensure assets are STIG'd, patched, and maintained in compliance with the customer IAVM Program.
May 28, 2020
Track findings with Plan of Action and Milestones (POA&M) through mitigation and/or risk acceptance.
June 22, 2020
Review scan results for the system assets, identify the respective remediation's for misconfigurations and weaknesses, and work with the system team to ensure timely implementation of fix.
July 06, 2020
Assist in the maintenance of System Security Plan (SSP), Security Test Procedures (STP), document and maintain implementation details of NIST 800-53 security controls.
August 09, 2020
Evaluate performance results and recommend major changes affecting short-term project growth and success.
August 22, 2020