Automated Compliance Evaluator (ACE) & Continuous Cyber Compliance Targeting System (C3TS)

______________________________________________

Date: 02/20/2025

Vendor: DTA Solutions

Technology/Topic: Automated Compliance Evaluator (ACE) & Continuous Cyber Compliance Targeting System (C3TS)

______________________________________________

Welcome to the Technical Exchange Meeting (TEM)!

DTA’s toolsets will save organizations thousands of man-hours a year and potentially hundreds of thousands of dollars a year accomplishing DISA assessments and centralize reporting. C3TS will also provide the possibility of viewing remote organizational CCRI/CORA readiness status for each location from a consistent reporting platform. Reducing confusion between DISA, agency leadership, and local installation command.

Automated Compliance Evaluator (ACE) is STIG automation that introduces baseline/comparison capabilities. Leveraging this capability has allowed the team to automate more vulnerability checks and output detailed information directly onto the .ckl file. This information includes any Group Policy Object (GPO) information that might pertain to the vulnerability.

Continuous Cyber Compliance Targeting System (C3TS) is a vulnerability framework that combines ACAS vulnerability data, STIG checklist data, organizational data, and system data into one central location. C3TS keeps track of all DISA CCRI/CORA scoring categories in real time as data is introduced. C3TS will also introduce a Plan of Action & Milestone (PoA&M) lifecycle that will allow organizations to manage and monitor PoA&M’s from one central location.

DTA toolsets are different because they introduce a centralized point for monitoring and maintaining DISA cyber compliance. Providing a centralized location will save organizations thousands of man-hours and potentially hundreds of thousands of dollars a year while better understanding their cyber readiness status. Our toolsets could also be used to monitor compliance actions from remote locations. DTA toolsets also provide consistent reporting for all levels of command leadership. Reducing confusion and complexity suffered by all.

______________________________________________

To join the DISA TEM mailing list, please contact: disa.tem@mail.mil

______________________________________________

Disclaimer:

— TEMs do not serve as a marketing venue or request for proposal actions.

— TEMs shall not be interpreted as a commitment by the Government to issue a solicitation or ultimately award a contract.

— TEMs do not serve as an endorsement of any presented technologies or capabilities

— Presentations will not be considered as proposals nor will any awards be made as a result of a TEM session.

— TEMs are public open forums – no proprietary or sensitive information should be presented during TEM sessions. Only publicly facing content is permissible in DISA TEM sessions.