Automating Continuous Compliance

[Wanrashid1]

Agencies find that Continuous Monitoring is hard, expensive, inaccurate, and inextensible. Screenshots are the state of the art, and there are no public reference implementations for automatically generating compliance evidence for the US government even though there are technologies available to assess compliance. TTS will investigate the possibility of using existing solutions to validate ATO’d systems and explore ways to publish a reference implementation.

An idea submitted by a civil servant at: General Services Administration, Federal Acquisition Service