HowTo: Track RMF and FedRAMP system packages with inherited common controls from cloud providers

OpenRMF Professional v2.7 Compliance Listing with Inherited Controls

Moving to “The Cloud”

Creating your Custom Checklists

Adding CCIs linked to Vulnerabilities / Questions on Custom Checklists
Add your title, discussion, check content, and fix text for your own custom checklist
Custom Checklist dashboard, similar to the normal checklist dashboard in OpenRMF Professional

Add the Custom Checklist to your Infrastructure System Package

List all Custom Templates to make checklists for your infrastructure package or other system packages
Adding the custom checklist to your system package for tracking against compliance

Tracking Inherited Controls for Applications, Platforms, and Users

Generating Compliance including custom checklists that match to the CCIs and Controls / Subcontrols

Automation on Updated Inherited / Common Controls

Notifications when an underlying inherited system package or common controls are updated

--

--

--

CEO of Soteria Software. Developer on OpenRMF. Software Geek by trade. Father of three daughters. Husband. Love new tech where it fits. Follow at @soteriasoft

Love podcasts or audiobooks? Learn on the go with our new app.

Recommended from Medium

Is There Any API for getting Data From Oneworld Alliance?

Deposits are OPEN for the SFI — ETH Fossil Farm and Jurassic Pool!

Get Structured Visitors’ Reports With An IP address JSON API

Beta Tournament — Claiming TANKS, NFTs and Championship Entry

JMeter ile İlk Performans Testi

Traverse a Matrix in Spiral form 🍭 | Coding Interview | Matrix

RoadMap to Data Structures and Algorithms

How To Get Car Information With A Photo

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Dale Bingham

Dale Bingham

CEO of Soteria Software. Developer on OpenRMF. Software Geek by trade. Father of three daughters. Husband. Love new tech where it fits. Follow at @soteriasoft

More from Medium

Log Analysis-Sysmon — BTLO, WriteUp

Extended Attributes and TCC on macOS

Audit Logs: Best Practices for Security

Traditions — Incident Response