#16 RMF Phase 1: Assessments

[JeffOdegard]

Phase 1: RMF Assessments (Pro Version)

1. Ingest tailored control set from spreadsheet
2. Allow editing of control results
   a. Perhaps a wizard to help with evaluation of Not Reviewed controls
   b. Provide ability (look up table?) to associate related controls - when you edit one, you get links to "related controls" to edit them
   c. Summarize related technical results (via CCI for RMF/STIGs) and have a button "Update based on technical findings" to mark some controls as Non-compliant due to tech findings. (Should this be automatic?) You could add some text to the results field like, "This control is non-compliant in part due to technical findings."
3. Export a spreadsheet with the final results.
4. Add a Procedural Statistics Page (I have an example spreadsheet) - we also have a very helpful statistics tab we can add to the eChecklist