Risk Management Framework (RMF)

As a cleared contractor for the Department of Defense (DoD), SSTi maintains a security program in compliance with the National Industrial Security Program Operating Manual (NISPOM) and Risk Management Framework (RMF) process.

 

SSTi was one of the first Defense Security Service (DSS), now Defense Counterintelligence and Security Agency (DCSA), contractors to obtain an Approval to Operate (ATO) for multi-user standalone (MUSA) information system (IS) under the RMF process in the Philadelphia Metro area.

 

SSTi provides security consulting services by assesing industry contractors security programs for NISPOM and RMF compliance along with providing eMASS instruction for maintaining IS System Security Plans (SSPs) under RMF.