You can use OpenRMF Professional to help implement 6 of the 11 security domains concerning Continuous Monitoring outlined in NIST 800–137 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations. Here we showcase the main domains where our automation helps you and your team track ConMon proactively. Security Automation Domains to Track These…

Use Soteria Software’s OpenRMF Professional to continually automate your Risk Management Framework (RMF) steps and the tasks involved. Reduce risk while reducing costs and manual tasks through automation of scans, trends, compliance, reporting, and live POAM tracking. Summary (TL;DR) The Risk Management Framework is a cyber compliance framework used by many government…

If you have ever been told “I need a DISA checklist on your servers/devices for accrediting the network”, this is for you! This is a quick step-by-step on how to scan your server, virtual machine, or workstation with the free SCAP Compliance Checker (SCC). You can download the application for…

This is a quick step-by-step guide on how to scan your server, virtual machine, or workstation with the free OpenSCAP tool and DISA Benchmark for your operating system. …

We have added several great features for the latest release. Automated Cyber Readiness (CCRI). Loading of hardware and software lists for easier add/edit. Loading of ports/protocols/services list for easier add/edit. Universal patch vulnerability format for patch scans. Loading compliance statements and mitigation statements from .xlsx, .csv, or JSON. Expanded API…

Generate your CCRI Scores and reports in seconds with the latest version of OpenRMF Professional from Soteria Software. You already are loading your compliance scans, patch vulnerability scans, software scans and container scans into our automation solution. Now add your weighted values and ranges to the vulnerability categories in our…

Good quality. Great speed. Correct results. Consistently delivered. That sounds like RMF right? If not, you may need to think of RMF from a process perspective and not a “throw a bunch of people at it” perspective. Our OpenRMF Professional solution is like the <insert your favorite fast-food restaurant> of…

Nothing works more powerfully than simplicity. For the Risk Management Framework, map (or create) your processes and use OpenRMF Professional automation to simplify the RMF process into understandable, repeatable steps for you and your team. In simple terms: Stop using the 1995 Rand McNally Road Atlas (manual RMF) and start…

It took me a bit to get my underlying REL 8.7 VM working. But once I did, I got my docker-compose.yml file to work with podman-compose, persisted volumes, shared volumes, with just 1 specific change only: quotes around single ports listed. Read on to see what else I had to…