10/1 Ask the Expert: Best Practices when implementing NIST RMF with Accenture Federal Services

The Risk Management Framework provides a process that integrates security and risk management activities into the system development life cycle. The risk-based approach to security control selection and specification considers effectiveness, efficiency, and constraints due to applicable laws, directives, Executive Orders, policies, standards, or regulations. ServiceNow and Accenture Federal Services have jointly developed a platform capability that provides a streamlined approach to managing the RMF steps and activities to help reduce complexity, reduce manual data entry, support the automated creation of RMF artifacts, and accelerate the assessment & authorization process.

Integrated Risk Management powered by ServiceNow:

- Built in partnership with AFS and ServiceNow to develop the ServiceNow platform RMF 2.0 IRM capability to provide the latest features and functionality for a seamless, scalable, and extensible integrated federal assurance experience.
- Is a Cyber Assurance Integration Framework (CAIF) leveraging Automation using Chatbot / RPA functionality in developing the A&A / ATO package to reduce manual input and complexity.
- Streamlines Information Assurance (IA) with DevSecOps automation, solution delivery and sustainment activities to enable acceleration of Assessment and Authorization (A&A) / RMF activities and support the quick transition to an ongoing authorization operational model.
- Integrates with ServiceNow GRC / IRM and Vulnerability Response modules to provide a single, integrated view for cyber assurance and reduce or eliminate manual process and data imports, and support efficient, automated artifact uploads.

- Provides a holistic view into the overall assurance posture with real-time dashboards and reporting for every step of the RMF / CAIF process.


See this video on the Now Community
https://community.servicenow.com/community?id=community_event&sys_id=6c0cc787db1758509e691ea6689619d0