Date: 04/10/2024
Vendor: DTA Solutions
Technology/Topic: Cyber Compliance Optimization Centered Around CCRI Assessment Automation
TEM Video (milTube): https://www.milsuite.mil/video/watch/video/68545
______________________________________________
Welcome to the Technical Exchange Meeting (TEM)!
DTA’s toolsets will save organizations thousands of man-hours a year and potentially hundreds of thousands of dollars a year accomplishing DISA assessments and centralize reporting. C3TS will also provide the possibility of viewing remote organizational CCRI readiness status for each location from a consistent reporting platform. Reducing confusion between DISA, agency leadership, and local installation command.
Automated Compliance Evaluator (ACE) is STIG automation that introduces baseline/comparison capabilities. Leveraging this capability has allowed the team to automate more vulnerability checks and outputs detailed information directly onto the .ckl file. This information includes any Group Policy Object (GPO) information that might pertain to the vulnerability.
Continuous Cyber Compliance Targeting System (C3TS) is a vulnerability framework that combines ACAS vulnerability data, STIG checklist data, organizational data, and system data into one central location. C3TS keeps track of all DISA CCRI scoring categories in real time as data is introduced. C3TS will also introduce a Plan of Action & Milestone (PoA&M) lifecycle that will allow organizations to manage and monitor PoA&M’s from one central location.
______________________________________________
To join the DISA TEM mailing list, please contact: disa.tem@mail.mil
______________________________________________
Disclaimer:
— TEMs do not serve as a marketing venue or request for proposal actions.
— TEMs shall not be interpreted as a commitment by the Government to issue a solicitation or ultimately award a contract.
— TEMs do not serve as an endorsement of any presented technologies or capabilities
— Presentations will not be considered as proposals nor will any awards be made as a result of a TEM session.
— TEMs are public open forums – no proprietary or sensitive information should be presented during TEM sessions. Only publicly-facing content is permissible in DISA TEM sessions.