http://elamb.org/eitdr-enterprise-information-technology-data-repository/?utm_source=rss&utm_medium=rss&utm_campaign=eitdr-enterprise-information-technology-data-repository information system security, risk management, scam research Sun, 27 Nov 2011 07:30:02 +0000 hourly 1 http://wordpress.org/?v=3.2.1 http://elamb.org/eitdr-enterprise-information-technology-data-repository/comment-page-1/#comment-197682 Enterprise Mission Assurance Support Service (eMASS) | elamb Wed, 31 Aug 2011 02:53:22 +0000 http://elamb.org/eitdr-enterprise-information-technology-data-repository/#comment-197682 [...] USAF Enterprise Information Technology Data Repository (EITDR) [...] [...] USAF Enterprise Information Technology Data Repository (EITDR) [...]

]]> http://elamb.org/eitdr-enterprise-information-technology-data-repository/comment-page-1/#comment-180995 Robert Littlejohn Mon, 23 Mar 2009 12:41:42 +0000 http://elamb.org/eitdr-enterprise-information-technology-data-repository/#comment-180995 Although the article above is accurate in what it says, it inferes that the certification and accreditation process is based on EITDR. I currently work at the Agency and when I first arrived I was asked if I had ever done an EITDR C&A. I responded that EITDR is a data repository not a certification and accreditation process. DOD has the DIACAP and federal systems are certified and accredited according to the NIST SP800 series guidance to be FISMA compliant. The Air Force uses IT Lean SISSU (security, interoperability, supportability, sustainability, and useability) as its "branded" process which incorporates acquisition and DIACAP. From a DITSCAP point of view there really isn't much of an SSAA or accreditation documentation anymore. Generally the package going forward to the DAA consists of the Information Systems Plan (ISP), DIACAP Scorecard, Plan of Action and Milestones (POA&M), and the CA's recommendation letter. Although the article above is accurate in what it says, it inferes that the certification and accreditation process is based on EITDR. I currently work at the Agency and when I first arrived I was asked if I had ever done an EITDR C&A. I responded that EITDR is a data repository not a certification and accreditation process. DOD has the DIACAP and federal systems are certified and accredited according to the NIST SP800 series guidance to be FISMA compliant. The Air Force uses IT Lean SISSU (security, interoperability, supportability, sustainability, and useability) as its “branded” process which incorporates acquisition and DIACAP. From a DITSCAP point of view there really isn’t much of an SSAA or accreditation documentation anymore. Generally the package going forward to the DAA consists of the Information Systems Plan (ISP), DIACAP Scorecard, Plan of Action and Milestones (POA&M), and the CA’s recommendation letter.

]]>