Nothing works more powerfully than simplicity. For the Risk Management Framework, map (or create) your processes and use OpenRMF Professional automation to simplify the RMF process into understandable, repeatable steps for you and your team. In simple terms: Stop using the 1995 Rand McNally Road Atlas (manual RMF) and start…

It took me a bit to get my underlying REL 8.7 VM working. But once I did, I got my docker-compose.yml file to work with podman-compose, persisted volumes, shared volumes, with just 1 specific change only: quotes around single ports listed. Read on to see what else I had to…

The latest installment of our flagship product, OpenRMF Professional, brings great performance changes. We outlined what those are and why we did them here. …

At Soteria Software, we just did some massive updates specifically around performance of our OpenRMF Professional application. Now that we are past the scalability and large dataset issues, we decided to do a postmortem just in case this will help other teams get past this. …

Did you know…you can actually use OpenRMF Professional to comply with NIST controls in the CA, CM, PL, PM, RA, SA, and SC families?!?! Well you can. Not only does our OpenRMF Professional solution speed your ATO process, save massive time and money, and move you toward a Continuous ATO…

With our new feature release out July 8th, Soteria Software has added compliance statements and detailed compliance reporting for you, your ISSO/ISSM/ISSE and Cyber team. We also included NIST 800–53 Revision 5 controls and corresponding CCIs to use. …

Automation is key to attaining an ATO for your RMF or FedRAMP systems and applications faster. …

Yes you read that right! Combine your Compliance Statements, automated SCAP scan checklists, automated CIS checklists, and Custom checklists. Run through our compliance engine. Within a couple minutes, see your full compliance down to the CCI Level. Watch the video below to see how easy it is to track all…

Your cyber personnel and program manager see and manage all your ATO information and status! Your system admins only see their checklists and devices. Your developers only see their checklists and devices. And your network admins only see their data. …