I-Assure, LLC

Provides streamlined, firm-fixed-price RMF consulting to achieve Authority to Operate (ATO). It utilizes a unified RMF process, inheritance and association models, FIPS 199/NIST SP 800-60 pre-mapping, proof-of-compliance artifacts, and review-approval checklists. Over 425 ATOs have been delivered with zero submissions denied by an Approving Authority.

• RMF Strategic Planning

  Establishes inheritance and association models, maps all RMF requirements, and pre-maps FIPS 199 and NIST SP 800-60 information types.

• A&A Review & Standardization

  Provides standardized review/approval checklists, delivery traceability, and proof-of-compliance artifacts to reduce cost and schedule.

Delivers automated STIG assessment and remediation using custom tools and scripts to bring military systems into compliance in minutes or hours. The service utilizes a personnel matrix of certified engineering specialists to apply requirements without compromising system functionality. Over 4.5 million STIG requirements have been applied since 2005.

• STIG Discovery & Assessment

  Reviews hardware, software, and network diagrams to identify baseline security requirements.

• STIG Remediation & Mitigation

  Applies automated tools and scripts to quickly implement and mitigate STIG controls.

Automates and streamlines the Enterprise Mission Assurance Support Service (eMASS) workflow. It leverages the proprietary eMASS Editor tool to create and manage data imports, implementation plans, Assessment Procedure responses, Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports (RARs).

• eMASS Automation

  Utilizes proprietary tools to automate data entry and manage key authorization artifacts.

• Security Policy Library

  Provides customized security policies covering all RMF control families, including access control, auditing, configuration management, and incident response.

Provides proactive monitoring and lifecycle sustainment to maintain authorizations and protect initial compliance investments.

Offers compliance products and templates designed for cleared defense contractors, including DIACAP-to-RMF transitions.

• RMF Templates

  Pre-developed template packages to accelerate security authorization documentation.

• DIACAP Templates

  Legacy security transition templates to streamline compliance updates.

• Scan Manager

  Software tools to organize, parse, and manage vulnerability scanner outputs.