Moving to Continuous Authorization using NIST RMF

The ServiceNow and Carahsoft team would like to invite you to join us for a virtual webinar series. No matter your level of familiarity with ServiceNow, grab a cup of coffee and join your peers for these informative sessions.

This series will cover a variety of topics. Including:

Modernize Grants Management for Federal Programs
Managing the Migration to Cloud using a "Service-Aware" CMDB
Low-Code Application Creationfor the Federal Government
Making Healthcare More Human: Connecting teams, Streamlining Processes, and Securely Integrating Systems to Change Lives
HR + IT + Workplace: Better Together to Support Employee Onboarding, Moves and Offboarding
Total IT Asset Management: What is it and how should you get started with ServiceNow
Moving to Continuous Authorization using NIST RMF
One Team - Many Missions: Executeon Alll Your Mission Strategies from One Plaform

FISMA requires CISOs to certify, through a process called Assessment and Authorization (A&A), the security of their IT systems. Each IT system is required to receive an Authority To Operate (ATO) before being connected to the Enterprise. NIST describes the process called the Risk Management Framework in SP 800-137.

In this session, you'll learn how ServiceNow Continuous Authorization and Monitoring (CAM) solves two problems – (1) Speeding the ATO process – Bringing IT systems online more quickly and (2) Giving CISOs a path to move IT systems towards Continuous Authorization, as described in NIST 800-137. We will show the development of an ATO Approval Package under 800-137, from the Prepare stage through Control Selection, Implementation, and Assessment, through Approval and Monitoring. We’ll also show how CAM helps CISOs manage the entire ATO process, from system intake through authorization and continuous monitoring, including Plans of Actions and Milestones (POAMs).