The JFAC requires an accredited cloud-hosted marketplace of all assurance tools made available to the DoD community. Cloud-hosting is the current desired approach, but drives challenges from a cybersecurity perspective in obtaining an Authority to Operate (ATO). JFAC
is an OUSD(R&E) organization that does not have an authorizing official, so
in order to gain access to accredited cloud environments, partnerships with
DISA or the Military Services’ authorizing officials to grant an authority to
operate (ATO) is dependent on organizational partnerships external to JFAC. The JFAC needs a streamlined approach for gaining an ATO for a multitude of assurance tools to be made available to the community. The JFAC is looking to establish a cloud-hosted marketplace to include the various assurance tools identified in our current catalog.
Currently, assurance tools sponsored by JFAC are delivered to the federated community via multiple distribution mechanisms (laptops, desktops, engineering networks, etc.) and is a sub-optimal solution for delivering affordable capabilities. A specific use case is to change the distribution mechanism of our JFAC-sponsored Code Dx tool by making a single server available in the cloud for consumption by the user-base across organizational and network boundaries.
Expand from a single assurance tool in a cloud hosted environment for use by the JFAC to grow to include the various tools identified in the JFAC portal
Provide an accredited cloud-hosting environment for all assurance tools identified in the JFAC portal that can be made available to the DoD assurance ecosystem.
Assurance, Cybersecurity, Cloud, Accreditation, Market Place, Catalog, Federated, AI/ML, ATO
Not Provided
