Automating RMF Steps Using Lightweight Scripts and Tools

Many Risk Management Framework (RMF) steps and sub-tasks can be accomplished using small, lightweight tools and scripting. Only specific administrative tasks can be automated or inherited in Enterprise Mission Assurance Support Service (eMASS). This constraint results in many government organizations using different tools, creating their own standards, and often buying costly tools to capture all the information needed. This research will explore the many tools and techniques that can be leveraged to accomplish these steps and tasks using a set of scripts that focuses on efficiency and repeatability. Since RMF is not strictly a framework the United States government uses, this research will benefit the community by providing tools and techniques to generate specific information required for implementing the RMF process or data collection activities.