Ingalls Information Security’s Government Programs Team is thrilled to announce the launch of Cybersecurity Assurance Readiness (CSAR) Prepare, a software automation tool that streamlines and simplifies the path to Authorization to Operate (ATO) approval. Launched today, “CSAR Prepare” is the first prototype and Minimum Viable Product (MVP) available for use and it supports the Prepare and Categorize System steps of the Risk Management Framework (RMF). Lowering the barrier to Assessment & Authorization (A&A) entry and acting as a precursor to eMASS, CSAR Prepare accelerates the RMF Prepare Step, automating AF mandatory ATO forms, and enabling users to keep pace with RMF requirements.
Ingalls understands the unique challenges surrounding the DoD ATO process, which is why the Government Programs Team developed CSAR with the long-term mission to help small businesses that don’t know how to start the A&A process get on the right track.
Ingalls won a USAF Simulators Innovation Pitch Day Competition in December 2020 to build a prototype tool for accelerating applications through the A&A process to achieve an ATO. After performing usability tests with the various training prototype applications, it was soon realized that CSAR had a broader, enterprise-wide use, not just for training applications, but for any application going through the A&A process.
Ingalls took the most frustrating and difficult part of the RMF process and automated it. In CSAR, AF mandatory forms such as the ITCSC, PIA, and PCIL are mapped so that you answer once, and it maps to many. The repeatable and sustainable A&A services in CSAR are much more scalable and responsive than traditional methods. The CSAR Prepare process can cut up to 20% of time creating complete and accurate forms, which leads to higher acceptance rate into the Authorizing Official workflow.
