Cleared contractor companies are required to have Authorization to Operate (ATO) for classified information systems on their premises, under the purview of the Defense Counterintelligence and Security Agency (DCSA). DCSA employs a unique “flavor” of the Risk Management Framework (RMF). RMF Supplement for DCSA Cleared Contractors is a one-day session in which we provide instruction on the unique features of RMF as practiced in the DCSA cleared contractor community. Topics include: Introduction to DCSA Roles and Responsibilities Types of Systems (SUSA, MUSA, P2P, etc.) RMF Life Cycle (Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor) Documentation and artifacts Type Authorization and other special circumstances National Industrial Security Program (NISP) eMASS Support tools RMF Supplement for DCSA Cleared Contractors is a one-day session in which we provide instruction on the unique features of RMF as practiced in the DCSA cleared contractor community. Policies Covered: NIST SP 800-37 NIST SP 800-53 NIST SP 800-137 NIST SP 800-60 DoDI 8500.01 DoDI 8510.01 CNSSI 1253 NISPOM DAAPM
Learning Objectives
To provide students the necessary information to obtain an authority to operate for classified systems under Defense Counter Intelligence Security Agency (DCSA).
Framework Connections
Specialty Areas
- Risk Management
Feedback
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.