Policy and eMASS Support

BACKGROUND
Enterprise Mission Assurance Support Service (eMASS) is the Department of Defense’s (DoD) recommended tool for information system Assessment and Authorization (A&A). eMASS automates the A&A process, manages workflow among user roles, and generates a variety of reports based on user needs.

PROBLEM
While eMASS automates some portions of the RMF, a large portion of eMASS execution is still manual and requires extensive data input. This has led to expensive, time consuming efforts to manage your system’s eMASS implementation.

SOLUTION
I-Assure has automated and streamlined the eMASS implementation for our DoD customers.  Our internally developed tool, eMASS Editor, creates and manages data imports and artifacts required by eMASS. eMASS Editor streamlines the eMASS Implementation Plan, Assessment Procedure responses, Plan of Actions and Milestones (POA&M) and Risk Assessment Report (RAR). Our solution reduces cost and minimizes delivery schedule.

I-Assure has executed eMASS in both the Information Systems Security Engineer (ISSE) and Validator role for over 250 A&A efforts.

To comply with Assessment and Authorization (A&A) requirements, multiple security policies must be produced. During the DITSCAP to DIACAP transition, I-Assure created a library of policies to comply with the new DoD requirements. To support the transition to the Risk Management Framework (RMF), I-Assure is once again leading the way in policy development. The following policies are available at no cost: